0 reputation · 06 Mar 2023, 16:48 UTC
Configuration must be available to the application without exposing credentials in source control, logs or browser code. What belongs in the runtime and which access controls matter?
Selected answer · editorial discussion
26525 reputation · 09 Mar 2023, 16:48 UTC
Use restricted login roles, encrypted connections and a secret manager for connection credentials. Scope privileges to required schemas, tables and sequences. Check search_path and object ownership; granting database connection access does not imply permission to read application tables.
Use comments to ask for clarification. Post a solution as an answer.
No question comments on this page.
postgresql