Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1s5V8Q-005h36-7Y for pgsql-admin@arkaria.postgresql.org; Fri, 10 May 2024 18:38:22 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1s5V8N-000P0v-28 for pgsql-admin@arkaria.postgresql.org; Fri, 10 May 2024 18:38:19 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1s5RwF-00GZ0y-Qz for pgsql-admin@lists.postgresql.org; Fri, 10 May 2024 15:13:37 +0000 Received: from mx0b-000e5c01.pphosted.com ([67.231.157.188]) by magus.postgresql.org with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1s5Rw8-000Mke-OI for pgsql-admin@lists.postgresql.org; Fri, 10 May 2024 15:13:34 +0000 Received: from pps.filterd (m0146460.ppops.net [127.0.0.1]) by mx0b-000e5c01.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id 44AD5xat018565 for ; Fri, 10 May 2024 11:13:26 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=evernorth.com; h=from : to : subject : date : message-id : content-type : mime-version; s=pod011016231234; bh=amCXmIbhBDvX06IKrAGgPJWAvg1G987fVuzBCQ+2s14=; b=fHUwH2mq9v+xTajrHdnlHJ8rSKrTqIExC3RjfRGKIHBV/F9UXlbx+lBWpjZYTN0MQ4SO zNWftkYHNkegeoHbM6WKM+Wk/oeVoBthqmeZS3xRg1K1aVGA+MQeDrAVxBSOzEos3ArB QDqyBwuQvVp2B2vUULUrICoE42k6SPm7uu1Beln67Jl+jQJYWQ9wK53zmITKVbPQm2Ol Ls79jqdmcGOOrugo52LNbWT9A68dSi4WMoyi/X/AypOzFzp2omrR9dTNOyMzehKKVHb1 rJpNNwIX46DEO2lfywbJZro3KVgP36TN8QJKrzHMouCBK7NRA/4ikpHjcgWaQjJeDUQu pQ== Received: from express-scripts.com (mx0b-000e5c14.pphosted.com [148.163.137.209]) by mx0b-000e5c01.pphosted.com (PPS) with ESMTPS id 3y1m598ds6-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 10 May 2024 11:13:26 -0400 Received: from m0206231.ppops.net (m0206231.ppops.net [127.0.0.1]) by pps.cigna (8.17.1.5/8.17.1.5) with ESMTP id 44AFDP9I027915 for ; Fri, 10 May 2024 10:13:25 -0500 Received: from eiaappxp0008.gid.prd.globalcore.com ([170.48.0.131]) by mx0a-000e5c14.pphosted.com (PPS) with ESMTPS id 3y16px97na-2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 10 May 2024 10:13:25 -0500 Received: from cvlappxp20751.internal.cigna.com (HELO PS2PW1012188.accounts.root.corp) ([10.36.52.88]) by EIAAPPXP0008.gid.prd.globalcore.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 10 May 2024 15:13:23 +0000 Received: from PS2PW1012186.accounts.root.corp (10.221.225.154) by PS2PW1012188.accounts.root.corp (10.221.225.158) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.4; Fri, 10 May 2024 11:13:24 -0400 Received: from PS2PW1012186.accounts.root.corp ([fe80::ddfb:faf8:59ca:a8ec]) by PS2PW1012186.accounts.root.corp ([fe80::ddfb:faf8:59ca:a8ec%6]) with mapi id 15.02.1544.004; Fri, 10 May 2024 11:13:24 -0400 From: "Wetmore, Matthew (CTR)" To: "pgsql-admin@lists.postgresql.org" Subject: Guidance on user deletion Thread-Topic: Guidance on user deletion Thread-Index: Adqi7AVbYuE6MaALTIipTILMdocnsw== Date: Fri, 10 May 2024 15:13:24 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.222.252.1] x-proofpoint-routing: 000e5c14 Content-Type: multipart/alternative; boundary="_000_f77fac58f3094867b9edc9a10904008fevernorthcom_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.650,FMLib:17.11.176.26 definitions=2024-05-10_10,2024-05-10_02,2023-05-22_02 X-Proofpoint-GUID: Z3_Bz7kW0A2N0LkBOY6Lnmu0ebOWJbRP X-Proofpoint-ORIG-GUID: Z3_Bz7kW0A2N0LkBOY6Lnmu0ebOWJbRP X-Connecting-IP: 148.163.137.209 X-External-Mail: True X-Content-Length: 7586 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.650,FMLib:17.11.176.26 definitions=2024-05-10_10,2024-05-10_02,2023-05-22_02 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 clxscore=1015 priorityscore=1501 bulkscore=0 mlxscore=0 malwarescore=0 mlxlogscore=619 impostorscore=0 spamscore=0 suspectscore=0 lowpriorityscore=0 phishscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2405010000 definitions=main-2405100109 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --_000_f77fac58f3094867b9edc9a10904008fevernorthcom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Corporate env. I've searched for an official BestPractice on user deletion (leave company= ), but can't find anything that is official-ish. Two options: 1. Change user psswd to nonsense, then expire account. 2. DROP user. There are +/- to both. I prefer #1, as it gives the exact timestamp of expire (protects company an= d ex-employee), but corporate auditors disagree. What do you do? Any official guidance on this? --_000_f77fac58f3094867b9edc9a10904008fevernorthcom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Corporate env.

 

I’ve searched for an official BestPractice on = user  deletion (leave company), but can’t find anything that is = official-ish.

 

Two options:

 

  1. Change user psswd to nonsense, then expire account.
    2. DROP user.

 

There are +/- to both.

 

I prefer #1, as it gives the exact timestamp of expi= re (protects company and ex-employee), but corporate auditors disagree.

 

What do you do?  Any official guidance on this?=

 

 

--_000_f77fac58f3094867b9edc9a10904008fevernorthcom_--