Re: Re: How to revoke privileged from PostgreSQL's superuser

2018-08-06 Thread Bear Giles
goes into executing the steps > above, but administering systems and databases that handle sensitive data > is a serious responsibility and requires requirements definition, planning, > architecture, execution, and then continuous monitoring and improvement. > As someone new to the DBA role, you

Re: How to revoke privileged from PostgreSQL's superuser

2018-08-06 Thread Bear Giles
definition, planning, > architecture, execution, and then continuous monitoring and improvement. > As someone new to the DBA role, you should talk to your architecture > colleagues as you have some good and serious work ahead of you. > > Cheers, > > - Evan > > > > > O

Re: How to revoke privileged from PostgreSQL's superuser

2018-08-06 Thread Bear Giles
Thanks, I didn't realize that this was handled by a flag instead of just the standard permissions. On Mon, Aug 6, 2018 at 7:43 AM, Tom Lane wrote: > Bear Giles writes: > > In postgresql the equivalent user is 'postgres'. Nobody should ever be > > logged in as tha

Re: How to revoke privileged from PostgreSQL's superuser

2018-08-06 Thread Bear Giles
Encrypting data within the database(*) severely limits its usability - you can't use it in queries, etc. In some cases it's not a problem since you'll never want to use it in a query anyway, or you can use a proxy(**). But as a general rule I think if you're encrypting much of your data then a trad

Re: How to revoke privileged from PostgreSQL's superuser

2018-08-06 Thread Bear Giles
I think you may be conflating two things. The "superuser" (or root) in an operating system is a special user (with uid = 0 in unix/linux systems) that bypasses many checks. Ideally sysadmins and regular users will never log in as root - they'll either use the existing privilege framework (e.g., gr