Re: How to revoke privileged from PostgreSQL's superuser

Поиск
Список
Период
Сортировка
От Bruce Momjian
Тема Re: How to revoke privileged from PostgreSQL's superuser
Дата
Msg-id 20180814195919.GA29140@momjian.us
обсуждение исходный текст
Ответ на Re: How to revoke privileged from PostgreSQL's superuser  (Benedict Holland <benedict.m.holland@gmail.com>)
Ответы Re: How to revoke privileged from PostgreSQL's superuser  (dangal <danielito.gallo@gmail.com>)
Re: How to revoke privileged from PostgreSQL's superuser  (Bruce Momjian <bruce@momjian.us>)
Re: How to revoke privileged from PostgreSQL's superuser  (Bruce Momjian <bruce@momjian.us>)
Список pgsql-admin
On Fri, Aug 10, 2018 at 04:06:40PM -0400, Benedict Holland wrote:
> I also would take Bruce's comment with a massive grain of salt. Everything that
> everyone does on a database is logged somewhere assuming proper logging. Now do
> you have the person-power to go through gigs of plain text logs to find out if
> someone is doing something shady... that is a question for your management
> team. Also, if you suspect someone of doing something shady, you should
> probably revoke their admin rights. 

Agreed, the best way to limit the risk of undetected DBA removal of data
is secure auditing --- I should have mentioned that.

-- 
  Bruce Momjian  <bruce@momjian.us>        http://momjian.us
  EnterpriseDB                             http://enterprisedb.com

+ As you are, so once was I.  As I am, so you will be. +
+                      Ancient Roman grave inscription +


В списке pgsql-admin по дате отправления:

Предыдущее
От: Bruce Momjian
Дата:
Сообщение: Re: How to revoke privileged from PostgreSQL's superuser
Следующее
От: Bruce Momjian
Дата:
Сообщение: Re: pg_upgrade failing with error pg_resetxlog no such file