Re: Securing records using linux grou permissions

2019-10-19 Thread Peter J. Holzer
On 2019-10-15 13:10:13 -0400, David Gauthier wrote: > I was hoping there was a way to integrate the user/permissions/groups in linux > with the PG permissions functionality.  You can at least map the OS users to DB roles by using the peer or ident authentication schemes. This way the users won't

Re: Securing records using linux grou permissions

2019-10-16 Thread Luca Ferrari
On Tue, Oct 15, 2019 at 6:07 PM David Gauthier wrote: > Users are going to be working with data through perl/DBI scripts which > currently connect using a generic role with hardcoded password in the connect > string. Access will be select/insert/update/delete We need to tighten up > security

Re: Securing records using linux grou permissions

2019-10-15 Thread Ron
It can be done, but you'd need much tighter integration with the OS, which would probably lock you in to only one platform ("Unix", not just Linux). On 10/15/19 12:10 PM, David Gauthier wrote: Ok, thanks. I was hoping there was a way to integrate the user/permissions/groups in linux with the

Re: Securing records using linux grou permissions

2019-10-15 Thread David Gauthier
Ok, thanks. I was hoping there was a way to integrate the user/permissions/groups in linux with the PG permissions functionality. On Tue, Oct 15, 2019 at 12:32 PM Michael Lewis wrote: > It sounds like you want row level security- > https://www.postgresql.org/docs/9.6/ddl-rowsecurity.html > >

Re: Securing records using linux grou permissions

2019-10-15 Thread Michael Lewis
It sounds like you want row level security- https://www.postgresql.org/docs/9.6/ddl-rowsecurity.html But, you will need to define separate roles on the database and ensure that the users and connecting with separate roles. The db can't magically know about the permissions on the OS side. >

Securing records using linux grou permissions

2019-10-15 Thread David Gauthier
Hi: psql (9.6.7, server 11.3) on linux What are the possibilities regarding restricting user access to records given this scenario. I have a DB with tables that are organized in a hierarchical way. For example, a "projects" table is the parent of >1 recs in a "domains" table (PK/FK setup),