For Your Eyes Only: Roles, Privileges, and Security in PostgreSQL | Citus Con 2023

Video of a conference talk and demo about defining the Principle of Least Privileges and how this philosophy influences roles and privileges in PostgreSQL-delivered at Citus Con: An Event for Postgres 2023. In this talk, Ryan Booz covers the importance of object ownership in PostgreSQL, how group and user roles can work in unison to effectively manage permissions, multiple ways to manage default privileges, and which privileges should always be modified in any new PostgreSQL database. Ryan also covers how recent Postgres releases are laying a foundation for more flexible and robust security management in the years ahead.
Ryan Booz is an Advocate at Redgate focusing on PostgreSQL. Ryan has been working as a PostgreSQL advocate, developer, DBA, and product manager for more than 20 years, primarily working with time-series data on PostgreSQL and the Microsoft Data Platform. Ryan is a long-time DBA, starting with MySQL and Postgres databases in the late 90s. He spent more than 15 years working with SQL Server before returning to PostgreSQL full-time in 2018.
► Video bookmarks:
⏩ 00:00 Introduction
⏩ 02:10 Building Blocks of Postgres Roles
⏩ 06:06 Roles within Postgres
⏩ 09:22 Special Roles within Postgres
⏩ 13:56 Privileges: Rights to databases & database objects
⏩ 16:28 Inheritance & how to utilize it
⏩ 18:07 Principle of Least Privilege
⏩ 21:57 Demo of Roles & Privileges in Postgres
✅ Learn more:
Watch more Citus Con 2023 talks: aka.ms/cituscon-playlist
📕 Everything you need to know about Citus Con: An Event for Postgres can be found at: aka.ms/cituscon
📌 Let’s connect:  
Twitter - @CitusCon, / cituscon
More resources:
📣 Slides for Ryan’s talk: bit.ly/postgres-your-eyes-only
#CitusCon #PostgreSQL #Security

[@herozero777]

A very comprehensive video indeed. Thank you guys for this amazing and informative video!

[@shravan.shandilya]

Pretty good video, thank you!

[@user-ks9bl8bz9w]

The best video on Roles, priviliges and security. Absolutely nailed it. I am glad I found this source

[@ryanbooz]

I'm so glad it was helpful!

[@literarycj]

This was a great video and super helpful. Thank you!

[@unusedTV]

Very useful talk for someone reasonably skilled in SQL but new to Postgres

[@ryanbooz]

Thank you! I'm glad it helped you on your new journey to Postgres

[@shanefeather-lopez5935]

Good refresher, thanks!

[@sau002]

Excellent

[@sau002]

Coming from a MSSQL background - this was very helpful.

[@ryanbooz]

That was my background, too! I'm glad it helped.

[@susanthabathige5860]

A cluster is not a single instance. A cluster is an entity that runs as a single unit. Usually, a cluster will contain two or more servers.

[@jamilinto]

Yep, the cluster part was a bit confusing..

[@YuuffyLIVE]

In the context of PostgreSQL, a cluster typically refers to a single database server instance.

[@bjornericcom]

Awesome video, thanks!

[@ryanbooz]

You're welcome!