Thread: BUG #18667: Default Permission Role Group

BUG #18667: Default Permission Role Group

From
PG Bug reporting form
Date:
The following bug has been logged on the website:

Bug reference:      18667
Logged by:          seyda aydin
Email address:      seyda-aydin@hotmail.com
PostgreSQL version: 15.0
Operating system:   previgles
Description:

Hello,

We use Postgresql -15. We need a account and the account should read all
data. We previgles this group permission . (read_all_data) 

When I add this group privigles, the account have pg_dump permission. Why?
How do I prevent this?

Thanks.


Re: BUG #18667: Default Permission Role Group

From
"David G. Johnston"
Date:
On Monday, October 21, 2024, PG Bug reporting form <noreply@postgresql.org> wrote:
The following bug has been logged on the website:

Bug reference:      18667
Logged by:          seyda aydin
Email address:      seyda-aydin@hotmail.com
PostgreSQL version: 15.0
Operating system:   previgles
Description:       

Hello,

We use Postgresql -15. We need a account and the account should read all
data. We previgles this group permission . (read_all_data)

When I add this group privigles, the account have pg_dump permission. Why?
How do I prevent this?.

There is no pg_dump permission.  But an account that can read all data is certainly capable of exercising that right via the pg_dump utility, or any other client for that matter.

David J.