search

powa-team / powa

PostgreSQL Workload Analyzer
http://powa.readthedocs.io/
PostgreSQL License
768 stars 57 forks source link

Avoid need of SUPER privilege #56

Closed tbe closed 8 years ago

tbe commented 9 years ago

To avoid using superuser privileges and give these to developer accounts, some wrappers would be great.

All calls to system views could be wrapped in a function with SECURITY DEFINER.

rjuju commented 9 years ago

Which version of PoWA are you using ?

The superuser requirement was originally added for security reasons. We got feedback that this requirement was too strong, so it has been removed in PoWA v2. You just need to ensure the user(s) connecting to the UI has sufficient privileges to read the tables in the powa database, and also to connect to other databases for advanced features like index suggestion.

tbe commented 9 years ago

We use 2.0.11. If this is already fixed there is only a documentation bug left ;)

http://powa.readthedocs.org/en/latest/security.html

rjuju commented 9 years ago

Indeed :)

I just update the documentation. Thanks a lot for the report!