[pgpool-general: 6260] Re: Role & Privileges for Health Check User !

[Bo Peng]

Hi,

sr_check_user and health_check_user don't need superuser privileges.
Just login privileges is ok for both of them.

> 1. sr_check_user

sr_check_user runs functions like:
 - pg_is_in_recovery()
 - pg_current_wal_lsn()
 - current_setting() 
 - etc.

> 2. health_check_user

health_check_user sends startup packet to backend nodes.

On Fri, 26 Oct 2018 13:16:42 +0530
Nitish Kumar <itcell.mpwz at mp.gov.in> wrote:

> Hi All,
> 
> Just wanted to obtain clarification on the kind of ROLES & PRIVILEGES for the 
> 
> 1. sr_check_user
> 2. health_check_user 
> 
> We need to define these 2 users in pgpool.conf when using PgPool II in Master/Slave Streaming Mode.
> 
> I wanted to know what kind of user with what kind of different privileges should I create in my PostgreSQL Servers for enabling PgPool for proper functioning.
> 
> The sr_check_user uses which tables/functions/views for its functioning ?
> The health_check_user uses which tables/functions/views for its functioning ?
> 
> Should giving a supersuser for these parameters a dangerous way or should I make a separate user with required roles & privileges just for these checks !
> 
> I wanted to make separate users for these checking parameters but I really don't know what kind of roles and privileges I needed to grant !
> 
> Kindly help by elaborating on above points.
> 
> Using PgPool II 3.7.5 and PostgreSQL 10.5 Servers.
> 
> Regards,
> Nitish Kumar


-- 
Bo Peng <pengbo at sraoss.co.jp>
SRA OSS, Inc. Japan