Re: Prevent users from executing pg_dump against tables

Поиск
Список
Период
Сортировка
От Kashif Zeeshan
Тема Re: Prevent users from executing pg_dump against tables
Дата
Msg-id CAAPsdhcYUEnhx51Mq9DKkXve=Twg=n8cKMa95Lfjzy4H8_+jdQ@mail.gmail.com
обсуждение исходный текст
Ответ на Prevent users from executing pg_dump against tables  (RAJAMOHAN <garajamohan@gmail.com>)
Список pgsql-general
Hi RAJAMOHAN

There is not a direct way to restrict  a table not to be allowed to be backed up by pg_dump.
But you can use the RLS (ROW LEVEL SECURITY) policy to restrict access.

Regards
Kashif Zeeshan
Bitnine Global

On Thu, May 2, 2024 at 10:47 AM RAJAMOHAN <garajamohan@gmail.com> wrote:
Hello all,

In our production db infrastructure, we have one read_only role which has read privileges against all tables in schema A.

We are planning to grant this role to some developers for viewing the data, but also I want to limit the users from executing statements like copy or using pg_dump. Main reason being I don't want the data to be copied from the database to their local machines.

I tried by implementing triggers, but was not able to figure out a way to restrict the pg_dump and allow only select statements.

Postgresql version - 12
Ec2 based postgres database 

Is there a way to implement this? Please advise.


Thanks & Regards,
Rajamohan.J
Devops Cloud Architect

В списке pgsql-general по дате отправления:

Предыдущее
От: RAJAMOHAN
Дата:
Сообщение: Prevent users from executing pg_dump against tables
Следующее
От: Fire Emerald
Дата:
Сообщение: Re: How to interpret 'depends on' errors in pg_restore?