Umair Shahid: Your app does not need PostgreSQL superuser

T2Covered by 1 source · first reported by Planet PostgreSQL at 22 Oct, 16:29 UTC

A PostgreSQL superuser can read any file on the server, write to it, and run shell commands on the host. That is more than just a powerful database account. It is shell access. This is also why the role your application logs in with should almost never be a superuser. Most tools ask for it anyway…

cloud

Sources

• T2Umair Shahid: Your app does not need PostgreSQL superuserPlanet PostgreSQL22 Oct, 16:29