From: Wetmore, Matthew (CTR) <Matthew.Wetmore@evernorth.com>
To: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Subject: Guidance on user deletion
Date: Fri, 10 May 2024 15:13:24 +0000
Message-ID: <f77fac58f3094867b9edc9a10904008f@evernorth.com> (raw)
Corporate env.
I've searched for an official BestPractice on user deletion (leave company), but can't find anything that is official-ish.
Two options:
1. Change user psswd to nonsense, then expire account.
2. DROP user.
There are +/- to both.
I prefer #1, as it gives the exact timestamp of expire (protects company and ex-employee), but corporate auditors disagree.
What do you do? Any official guidance on this?
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: Matthew.Wetmore@evernorth.com, pgsql-admin@lists.postgresql.org
Subject: Re: Guidance on user deletion
In-Reply-To: <f77fac58f3094867b9edc9a10904008f@evernorth.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox