view .hgchurn @ 1798:40cbfd268aa9

Row level security for import jobs Add imports to database as the actual login user. sys_admin then only needs to read and update (state) import job data. The way the policies for import_logs and track_imports are implemented has the side effect, that a sys_admin can do anything with all of them. More fine-grainded policies and changes to Go code are needed, if this is a concern.
author Tom Gottfried <tom@intevation.de>
date Mon, 14 Jan 2019 17:43:28 +0100
parents 451c7d3fe6be
children
line wrap: on
line source

teichmann@intevation.de = sascha.teichmann@intevation.de
bernhard.reiter@intevation.de = bernhard@intevation.de