pg.ddx.io pgsql-docs@postgresql.org mailing list archive
help / color / mirror / Atom feedPlease add best practice concerning user accounts
3+ messages / 3 participants
[nested] [flat]
* Please add best practice concerning user accounts
@ 2020-10-20 15:30 PG Doc comments form <noreply@postgresql.org>
2020-10-20 16:15 ` Re: Please add best practice concerning user accounts David G. Johnston <david.g.johnston@gmail.com>
0 siblings, 1 reply; 3+ messages in thread
From: PG Doc comments form @ 2020-10-20 15:30 UTC (permalink / raw)
To: pgsql-docs@lists.postgresql.org; +Cc: bram.mertens@anubex.com
The following documentation comment has been logged on the website:
Page: https://www.postgresql.org/docs/11/postgres-user.html
Description:
The page describes the postgres user typically used as superuser for a
PostgreSQL cluster.
It would be useful to add information about best practices concerning the
use of this account (or better to avoid using this account) for DB
management and application connections.
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: Please add best practice concerning user accounts
2020-10-20 15:30 Please add best practice concerning user accounts PG Doc comments form <noreply@postgresql.org>
@ 2020-10-20 16:15 ` David G. Johnston <david.g.johnston@gmail.com>
2020-10-21 07:46 ` RE: Please add best practice concerning user accounts Bram Mertens <bram.mertens@anubex.com>
0 siblings, 1 reply; 3+ messages in thread
From: David G. Johnston @ 2020-10-20 16:15 UTC (permalink / raw)
To: bram.mertens@anubex.com, Pg Docs <pgsql-docs@lists.postgresql.org>
On Tue, Oct 20, 2020 at 9:08 AM PG Doc comments form <noreply@postgresql.org>
wrote:
> The following documentation comment has been logged on the website:
>
> Page: https://www.postgresql.org/docs/11/postgres-user.html
> Description:
>
> The page describes the postgres user typically used as superuser for a
> PostgreSQL cluster.
> It would be useful to add information about best practices concerning the
> use of this account (or better to avoid using this account) for DB
> management and application connections.
>
I'm tending to agree that additional info along those lines is worthwhile
to mention; but your comment seems to indicate that you are interpreting
this user as being defined in the database when in fact it is the operating
system user that is being described.
David J.
^ permalink raw reply [nested|flat] 3+ messages in thread
* RE: Please add best practice concerning user accounts
2020-10-20 15:30 Please add best practice concerning user accounts PG Doc comments form <noreply@postgresql.org>
2020-10-20 16:15 ` Re: Please add best practice concerning user accounts David G. Johnston <david.g.johnston@gmail.com>
@ 2020-10-21 07:46 ` Bram Mertens <bram.mertens@anubex.com>
0 siblings, 0 replies; 3+ messages in thread
From: Bram Mertens @ 2020-10-21 07:46 UTC (permalink / raw)
To: David G. Johnston <david.g.johnston@gmail.com>; Pg Docs <pgsql-docs@lists.postgresql.org>
Hi David,
Thanks for your quick reply.
I understand this is referring to the operating system user. But my understanding is that by default this user is *also* the superuser account of the database.
I’ve come across some quick-and-dirty setups where this operating system user was being used to manage the DB. And even worse used as the application user.
I’ve been unable to find any documentation that explains this is a bad idea.
Nor have I found any recommendation that in addition to this superuser account one or more accounts (roles) need to be created for management and use by clients/applications.
FYI the reason I was looking at this is that currently I’m struggling to set up an account and pg_hba configuration (https://www.postgresql.org/docs/11/auth-pg-hba-conf.html) that allows me to connect from a remote client.
Regards
Bram
From: David G. Johnston <david.g.johnston@gmail.com>
Sent: Tuesday, 20 October 2020 18:15
To: Bram Mertens <bram.mertens@anubex.com>; Pg Docs <pgsql-docs@lists.postgresql.org>
Subject: Re: Please add best practice concerning user accounts
On Tue, Oct 20, 2020 at 9:08 AM PG Doc comments form <noreply@postgresql.org<mailto:noreply@postgresql.org>> wrote:
The following documentation comment has been logged on the website:
Page: https://www.postgresql.org/docs/11/postgres-user.html
Description:
The page describes the postgres user typically used as superuser for a
PostgreSQL cluster.
It would be useful to add information about best practices concerning the
use of this account (or better to avoid using this account) for DB
management and application connections.
I'm tending to agree that additional info along those lines is worthwhile to mention; but your comment seems to indicate that you are interpreting this user as being defined in the database when in fact it is the operating system user that is being described.
David J.
^ permalink raw reply [nested|flat] 3+ messages in thread
end of thread, other threads:[~2020-10-21 07:46 UTC | newest]
Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2020-10-20 15:30 Please add best practice concerning user accounts PG Doc comments form <noreply@postgresql.org>
2020-10-20 16:15 ` David G. Johnston <david.g.johnston@gmail.com>
2020-10-21 07:46 ` Bram Mertens <bram.mertens@anubex.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox