EA with repositories on PostgreSQL

[Boron]

Hello,
we are having all our EA models on a PostgreSQL server.
The server is configured to have a login role named "ea_user" that has superuser rights as role privileges.
EA uses "ea_user" and its configured password to login into the database(s).

I feel a little bit uncomfortable for a long time with the superuser rights to "ea_user".
What kind of access rights or privileges does a login role need as minimum for being able to do all possible tasks when EA connects to the database using that login role?

If reasonable possible I would like to cut the number of access rights of "ea_user" to the minimum.

[qwerty]

R/W/U/D on rows is enough. You don't need grants for manipulating tables. But the tables needed for EA must be fully accessible for an EA user.

q.

[Boron]

I assigned the following privileges now:

• Insert (= write = W?)
• Select (= read = R?)
• Update (= U?)
• Delete (= D?)

As far as I can see, I can work without any problems now.
I assume my mapping of "R/W/U/D" to the privilege names of PostgreSQL is OK. Can anyone confirm this, or was I just lucky .

[qwerty]

That's what I meant and you should be fine with these settings.

q.

[Boron]

Thanks a lot for your help .