Security and roles

EDB Postgres Distributed allows a PGD cluster to be administered without giving access to the stored data by design. It achieves this through the use of roles and controlled access to system objects.

• Data conflicts for roles and tablespace differences introduces the roles that PGD predefines for controlling access to PGD functionality.

• Role management discusses how roles are managed on multi-database nodes and new nodes.

• PGD predefined roles details the specific privileges of the PGD roles.

• Roles and replication explains how PGD replication interacts with roles and privileges.

• Access Control explains how tables, functions, catalog objects and triggers interact with PGD roles and Postgres attributes.

• Roles
• Role management
  • Role rule - No un-replicated roles
  • Roles for new nodes
  • Connections and roles
• PGD predefined roles
  • bdr_superuser
  • bdr_read_all_stats
  • bdr_monitor
  • bdr_application
  • bdr_read_all_conflicts
• Roles and replication
  • DDL and DML replication and users
  • Differing Table Ownership
  • Replication and row-level security
  • bdr_superuser role and replication
  • Privilege restrictions
  • Foreign key privileges
• Access Control
  • Catalog tables
  • PGD functions and operators
  • Granting privileges on catalog objects
  • Triggers