superuser | Postgres.FM 088 |

[ 🇬🇧_🇺🇸 Check out the subtitles - we now edit them, ChatGPT+manually! You can also try KZbin's auto-translation of them from English to your language; try it and share it with people interested in Postgres!]
Nikolay and Michael discuss the superuser role in Postgres - what it is, how and when it shouldn’t be used, and whether most cloud providers are right to not give us it (no prizes for guessing).
Here are some links to things they mentioned:
* superuser (docs) www.postgresql.org/docs/curre...
* Crunchy Data PostgreSQL Security Technical Implementation Guide (STIG) www.crunchydata.com/blog/crun...
* Supabase docs (unsupported operations) supabase.com/docs/guides/data...
* Crunchy Data docs docs.crunchybridge.com/concep...
* RDS docs docs.aws.amazon.com/AmazonRDS...
* Cloud SQL docs cloud.google.com/sql/docs/pos...
* Azure docs learn.microsoft.com/en-us/azu...
* Roles, Privileges, and Security (talk by Ryan Booz) • For Your Eyes Only: Ro...
~~~
What did you like or not like? What should we discuss next time? Let us know in the comments, or by tweeting us on @samokhvalov / samokhvalov and @michristofides / michristofides
~~~
Postgres FM is brought to you by:
- Nikolay Samokhvalov, founder of Postgres.ai postgres.ai/
- Michael Christofides, founder of pgMustard pgmustard.com/
~~~
This is the uncut version, with video. Check out Postgres.fm to find audio-only podcast episodes, edited for convenient listening.

[@obacht7]

Quite philosophical this time. Reminds me of "free as in freedom" vs. "free as in free beer". I will add "you only own what you can destroy" to my list of quotes worth remembering 👍 For me, the podcast is perfect for listening without video. I enjoy every episode!

[@maudrid]

I think that there's a flaw in how postgresql treats superuser. Some things only super user can do. Why not allow me to assign permission to a user that I want to allow to refresh a subscription for example. Now this user has to be a superuser. I've had to write functions that are just wrappers do specific things with execution rights of the superuser.