Nik and Michael discuss user management in Postgres — how roles work, making administration easier, setting passwords, and avoiding them being logged.
Here are some links to things they mentioned:
- Roles https://www.postgresql.org/docs/current/user-manag.html
- Privileges https://www.postgresql.org/docs/current/ddl-priv.html
- ALTER DEFAULT PRIVILEGES https://www.postgresql.org/docs/current/sql-alterdefaultprivileges.html
- GRANT https://www.postgresql.org/docs/current/sql-grant.html
- REASSIGN OWNED https://www.postgresql.org/docs/current/sql-reassign-owned.html
- ALTER ROLE (including SET) https://www.postgresql.org/docs/current/sql-alterrole.html
- CREATE ROLE https://www.postgresql.org/docs/current/sql-createrole.html
- Have I Been Pwned https://haveibeenpwned.com
- Pwned Passwords API https://haveibeenpwned.com/API/v3#PwnedPasswords
- Crunchy Data PostgreSQL Security Technical Implementation Guide (STIG) https://www.crunchydata.com/blog/announcing-the-crunchy-data-postgresql-stig
- Our episode on auditing https://postgres.fm/episodes/auditing
~~~
What did you like or not like? What should we discuss next time? Let us know via a YouTube comment, on social media, or by commenting on our Google doc!
~~~
Postgres FM is produced by:
- Michael Christofides, founder of pgMustard
- Nikolay Samokhvalov, founder of Postgres.ai
With credit to:
- Jessie Draws for the elephant artwork