Re: Securing a db app - RFC

On Wednesday 02 June 2004 17:58, btober@computer.org wrote:
> > You can probably use set session authorization. Here are some brief
> > steps.
> >
> > 1. Convert all your users as postgresql database users
>
> If he's going to do this, why bother with hard-coding a single user id
> and password in the application -- why not have the user log in as their
> defined Postgresql user, and let the data base handle all the security
> and permission issues?

In that case he can not use connection pooling. Thats all. Otherwise there is
no need for single user id.

 Shridhar