Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Enhancement]: Improve User Security Documentation #182

Open
1 task done
jgngo opened this issue Feb 8, 2022 · 1 comment
Open
1 task done

[Enhancement]: Improve User Security Documentation #182

jgngo opened this issue Feb 8, 2022 · 1 comment
Assignees
Labels
documentation Improvements or additions to documentation enhancement New feature or request

Comments

@jgngo
Copy link

jgngo commented Feb 8, 2022

Describe how this change will improve the Babelfish website.

This will help new users to understand the current limitations of Babelfish regarding user permissions.

Share implementation details for the website enhancement.

When you create a new user using CREATE LOGIN newuser WITH PASSWORD = 'newpassword' in T-SQL, this will create a user with babelfish roles master_guest and tempdb_guest. This allows the user to only access master and tempdb databases as guest. If you want to give this user read and write permissions to other databases in babelfish, you will need to login to a PostgreSQL client and run grant sysadmin to newuser which will provide full access to all databases created in Babelfish. Unfortunately this is an all or nothing permission system for now and work is in progress on building out database principal and permissions in Babelfish.

Relevant documentation

https://github.com/babelfish-for-postgresql/babelfish_extensions/issues/67

Code of Conduct

  • I agree to follow this project's Code of Conduct.
@jgngo jgngo added the enhancement New feature or request label Feb 8, 2022
@3manuek 3manuek added the documentation Improvements or additions to documentation label May 17, 2022
@3manuek 3manuek self-assigned this Jul 7, 2022
@robverschoor
Copy link

In v.1.2.0 or later, the database owner can give the login access to this database by running CREATE USER in the database for that login.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants