Re: Securing a db app - RFC

Поиск
Список
Период
Сортировка
От Shridhar Daithankar
Тема Re: Securing a db app - RFC
Дата
Msg-id 200406021806.14072.shridhar@frodo.hserus.net
обсуждение исходный текст
Ответ на Re: Securing a db app - RFC  (<btober@computer.org>)
Список pgsql-general
On Wednesday 02 June 2004 17:58, btober@computer.org wrote:
> > You can probably use set session authorization. Here are some brief
> > steps.
> >
> > 1. Convert all your users as postgresql database users
>
> If he's going to do this, why bother with hard-coding a single user id
> and password in the application -- why not have the user log in as their
> defined Postgresql user, and let the data base handle all the security
> and permission issues?

In that case he can not use connection pooling. Thats all. Otherwise there is
no need for single user id.

 Shridhar

В списке pgsql-general по дате отправления:

Предыдущее
От:
Дата:
Сообщение: Re: Securing a db app - RFC
Следующее
От: "Nagib Abi Fadel"
Дата:
Сообщение: Creating a session variable in Postgres