pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Bruce Momjian <bruce@momjian.us>
To: Ron <ronljohnsonjr@gmail.com>
Cc: pgsql-admin@lists.postgresql.org
Subject: Re: Query on User account password change details
Date: Sat, 8 May 2021 20:58:22 -0400
Message-ID: <20210509005822.GB27049@momjian.us> (raw)
In-Reply-To: <7b066839-cebe-e716-d7e2-0c052bdc0656@gmail.com>
References: <CAPOO3u4cxoCmJsXJaMHCLavecb-Bc77=qh=dfQN+bbYJ6gneWA@mail.gmail.com>
	<90B6B3A1-BB95-4D69-99EF-D86C0A859431@jakobs.com>
	<CAM+6J95bx6yUwv-rw4Cxft68YkxiQHKWDOW0LLNbymbt6538Kw@mail.gmail.com>
	<CAPOO3u7Y=_suBOaJuZZdB=rMYRtekQZO8=ZsEatDoR+cqZb3DQ@mail.gmail.com>
	<CAPOO3u4-McoLHk06fR6h6EhYMjarK7aNX-tLXLyq927hG-SByQ@mail.gmail.com>
	<E3977E87-876C-4417-BB61-F305AEA202A8@crazybean.net>
	<7b066839-cebe-e716-d7e2-0c052bdc0656@gmail.com>

On Sat, May  8, 2021 at 07:55:48PM -0500, Ron wrote:
> The problem with this scheme is that any role with SUPERUSER privs can modify
> that table.

I think only external auditing can detect what superusers do:

	https://momjian.us/main/blogs/pgblog/2019.html#January_30_2019

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EDB                                      https://enterprisedb.com

  If only the physical world exists, free will is an illusion.






view thread (20+ messages)  latest in thread

Message-ID: <20210509005822.GB27049@momjian.us>
Permalink:  ../20210509005822.GB27049@momjian.us/
Also on:    postgresql.org/message-id/20210509005822.GB27049@momjian.us

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: bruce@momjian.us, ronljohnsonjr@gmail.com, pgsql-admin@lists.postgresql.org
  Subject: Re: Query on User account password change details
  In-Reply-To: <20210509005822.GB27049@momjian.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox