Re: BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist

On 2024-02-16 Fr 16:35, Tom Lane wrote:
> PG Bug reporting form <noreply@postgresql.org> writes:
>> We have identified an issue where predefined roles are not modifiable,
>> however a Dept. of VA security checklist requires that no roles have
>> unlimited connections. The Predefined roles have unlimited connections, is
>> there a way to modify these?
> Solution 1: explain to your compliance department that it's pointless
> to worry about the connection limit for a role that can't log in.
>
> Solution 2: do a manual UPDATE on pg_authid.  This would have to
> be done over after any major-version upgrade, though.
>
>             


Also note that this is not by any stretch of the imagination a bug.


cheers


andrew

--
Andrew Dunstan
EDB: https://www.enterprisedb.com