Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps
 (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <pgsql-admin-owner+archive@lists.postgresql.org>)
	id 1lfXmA-0003xd-4t
	for pgsql-admin@arkaria.postgresql.org; Sun, 09 May 2021 00:58:30 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.92)
	(envelope-from <pgsql-admin-owner+archive@lists.postgresql.org>)
	id 1lfXm9-00020M-3h
	for pgsql-admin@arkaria.postgresql.org; Sun, 09 May 2021 00:58:29 +0000
Received: from makus.postgresql.org ([2001:4800:3e1:1::229])
	by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <bruce@momjian.us>)
	id 1lfXm8-000208-R9
	for pgsql-admin@lists.postgresql.org; Sun, 09 May 2021 00:58:28 +0000
Received: from momjian.us ([72.94.173.45])
	by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <bruce@momjian.us>)
	id 1lfXm4-0006F9-36
	for pgsql-admin@lists.postgresql.org; Sun, 09 May 2021 00:58:27 +0000
Received: from bruce by momjian.us with local (Exim 4.92)
	(envelope-from <bruce@momjian.us>)
	id 1lfXm2-000725-Q6; Sat, 08 May 2021 20:58:22 -0400
Date: Sat, 8 May 2021 20:58:22 -0400
From: Bruce Momjian <bruce@momjian.us>
To: Ron <ronljohnsonjr@gmail.com>
Cc: pgsql-admin@lists.postgresql.org
Subject: Re: Query on User account password change details
Message-ID: <20210509005822.GB27049@momjian.us>
References: 
 <CAPOO3u4cxoCmJsXJaMHCLavecb-Bc77=qh=dfQN+bbYJ6gneWA@mail.gmail.com>
 <90B6B3A1-BB95-4D69-99EF-D86C0A859431@jakobs.com>
 <CAM+6J95bx6yUwv-rw4Cxft68YkxiQHKWDOW0LLNbymbt6538Kw@mail.gmail.com>
 <CAPOO3u7Y=_suBOaJuZZdB=rMYRtekQZO8=ZsEatDoR+cqZb3DQ@mail.gmail.com>
 <CAPOO3u4-McoLHk06fR6h6EhYMjarK7aNX-tLXLyq927hG-SByQ@mail.gmail.com>
 <E3977E87-876C-4417-BB61-F305AEA202A8@crazybean.net>
 <7b066839-cebe-e716-d7e2-0c052bdc0656@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <7b066839-cebe-e716-d7e2-0c052bdc0656@gmail.com>
User-Agent: Mutt/1.10.1 (2018-07-13)
List-Id: <pgsql-admin.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-admin@lists.postgresql.org>
List-Owner: <mailto:pgsql-admin-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-admin>
Archived-At: 
 <https://www.postgresql.org/message-id/20210509005822.GB27049%40momjian.us>
Precedence: bulk

On Sat, May  8, 2021 at 07:55:48PM -0500, Ron wrote:
> The problem with this scheme is that any role with SUPERUSER privs can modify
> that table.

I think only external auditing can detect what superusers do:

	https://momjian.us/main/blogs/pgblog/2019.html#January_30_2019

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EDB                                      https://enterprisedb.com

  If only the physical world exists, free will is an illusion.