Jeff, set_user needs to be installed as per CIS benchmark standards, I see this as more vulnerable giving to individual users.
When you know a user or application account need set of permission, you can directly grant all the necessary privileges, why do you need to switch account in performing any operation, I am trying to find if there is any operation in particular that can only be done by postgres, or any super user account to inherit its roles?
Hi , i was wondering, why do i need to install set_user extension when i can grant all the privileges to user directly?
Surely you don't need to install set_user in general. Indeed, I've never even heard of it before.
Maybe you need it for some specific use, but you didn't describe anything about what you are doing.
Cheers,
Jeff
-- Bhasker Bathini