To: pgsql-admin@postgresql.org
From: Walter Hurry <walterhurry@lavabit.com>
Subject: Re: Update actions (with user name) inside PostgreSQL DB - any
	version on postgreSQL
Date: Wed, 14 Mar 2012 21:15:08 +0000 (UTC)
Lines: 15
Message-ID: <jjr1os$dkf$1@dough.gmane.org>
References: <8ecc4155e8754edef35e260a60a4a8db@mail.gmail.com>
	<1331722455.5503.166.camel@elliot>
	<98bfa47ff4bb6e222e89f751bbcbf4a7@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
User-Agent: Pan/0.135 (Tomorrow I'll Wake Up and Scald Myself with Tea; GIT
	30dc37b master)

On Wed, 14 Mar 2012 13:24:36 +0200, Khangelani Gama wrote:

> thanks, the issue we have is that we have many Linux users having root
> access into the system. So they're able to access the DB by just going
> in as "su - superusername". If this user is able to make any updates
> inside the database it might create problems. Auditors wants PostgreSQL
> to tell who updated what inside the database besides client users that
> access the database from outside using some applications. So this common
> "superusername" doesn't tell the actual person who got into the system
> and went onto make updates inside the database because they first logged
> as their linux users before as going in as postgres user called
> "superusername".

http://dl.dropbox.com/u/6106778/message.jpg