Date: Sun, 25 Aug 2019 10:44:18 +0200
From: "Peter J. Holzer" <hjp-pgsql@hjp.at>
To: pgsql-general@lists.postgresql.org
Subject: Re: Permission for not Django app to do Write and Read
Message-ID: <20190825084418.GB30240@hjp.at>
References: 
 <CAEEbwbebJESmN7ibEv5aNfG=P_VHiKwPvoXr2hJcnV4+TN0S_g@mail.gmail.com>
 <CAKoxK+6nPOCeuZxBFCTGk+SF52bM+YhZoFj-Hi=GpnjbEDzX-w@mail.gmail.com>
 <CAEEbwbcvLEEYUb+=_KR3CcsFRSc5uzAxEL1VzoUqUoSPY75RUA@mail.gmail.com>
 <CAKoxK+5G2MoNs23Ge52Eq4LP9dUN5X+hLDxjvr=26-+2JSNyLg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="neYutvxvOLaeuPCA"
Content-Disposition: inline
In-Reply-To: 
 <CAKoxK+5G2MoNs23Ge52Eq4LP9dUN5X+hLDxjvr=26-+2JSNyLg@mail.gmail.com>
User-Agent: Mutt/1.10.1 (2018-07-13)
Precedence: bulk


--neYutvxvOLaeuPCA
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2019-08-24 13:22:38 +0200, Luca Ferrari wrote:
> On Sat, Aug 24, 2019 at 11:53 AM Peter Wainaina <petwah17@gmail.com> wrot=
e:
> >
> > Thanks much for the response. This is what I mean am a database
                                                      ^^^^^^^^^^^^^
> > administrator for a production company and the product owner doesn't
    ^^^^^^^^^^^^^
> > want me to be able to either read or write information that will
> > come from Django application.
>=20
> I personally hate this kind of setup, because it does not make any
> sense to me that a developer must setup an application that must
> interact with a database that the developer himself cannot interact
> with.

Peter is the DBA here, not the developer. I don't think you can prevent
the DBA from seeing the data in the database - except by encrypting it
(as you suggested below). I guess it would be possible to write a Django
backend which implements an encryption layer, but getting decent
performance out of it might be ... challenging.

> However, keep it simple: define a django user, assign each object to
> such user, revoke any permission from public.
> And then let's the product owner setup a password.

You can still access the tables as postgres.

Of course you could set up another database instance where you don't
have DBA privileges, but then the product owner has to trust the system
administrator instead of the DBA. At some point you have to trust
somebody or do everything yourself.

        hp

--=20
   _  | Peter J. Holzer    | we build much bigger, better disasters now
|_|_) |                    | because we have much more sophisticated
| |   | hjp@hjp.at         | management tools.
__/   | http://www.hjp.at/ | -- Ross Anderson <https://www.edge.org/>

--neYutvxvOLaeuPCA
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=BJUG
-----END PGP SIGNATURE-----

--neYutvxvOLaeuPCA--