Module9_Database_Security

Question 1

what are the 3 levels of security?

Answer 1

Host based authenticatie through pg_hba.conf
Database user credentials
object credentials (grants/revokes)

Question 2

how to accept only ssl connections in PG?

Answer 2

change the host type in pg_hba.conf to HOSTSSL

Question 3

What is the purpose of setting listen_address in postgresql.conf

Answer 3

listen_addresses controls what network interfaces PostgreSQL can accept connections on, not what clients can connect to PostgreSQL.

Question 4

why does someone implement row Level Secuity (RLS)?

Answer 4

So some users can only see some rows of the tables and not ALL rows of that table.

Question 5

how to make use of Row level security?

Answer 5

First you enable RLS for that table:
Alter table TABLENAME ENABLE ROW LEVEL SECURITY;

Then you create a policy who to acces it because by default no one can see any data.
create policy POLICYNAME on TABLENAME USING (user=current_user);