For Your Eyes Only: Roles, Privileges, and Security in PostgreSQL
summary
Explains how PostgreSQL enforces the Principle of Least Privilege by making object owners the de facto gatekeepers, shows a live demo of role inheritance where a non-LOGIN group role owns objects so members share rights, and walks through setting default privileges so new tables automatically GRANT SELECT to a read-only role. Notes concrete version changes: removal of PUBLIC CREATE on the public schema in Postgres 15 and the addition of pg_read_all_data in Postgres 14, plus newer predefined roles in 15/16 to avoid superuser access.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 2:10Building Blocks of Postgres Roles
- 6:06Roles within Postgres
- 9:22Special Roles within Postgres
- 13:56Privileges: Rights to databases & database objects
- 16:28Inheritance & how to utilize it
- 18:07Principle of Least Privilege
- 21:57Demo of Roles & Privileges in Postgres
related talks
42mData Security using Roles, Privileges and Row Level Security
47mUntangling the Web of PostgreSQL Permissions
40mPostgreSQL Security for Application Developers
32mEnhancing Security in PostgreSQL
07mAll about Postgres security
28mPostgreSQL vs. SQL Server: Security Model Differences
50mPostgreSQL Security. How Do We Think?
47mRow Level Security Explained