Skip to content

Pass "shared-server" flag and groups used to allow access to shared server to SERVER_PASSEXEC_COMMANDS commands #10703

Closed

Description

@deefdragon

Describe the solution you'd like

When using oauth to log in and connect to a shared server, the passexec works great, however, to be completely secure, id love some method of guaranteeing that the user has access to the provided server via either a "This was shared to me" variable, and or, a variable containing the group(s) that the user had that granted them access to that server.

(I suspect passing the full groups list as well would be desired by some)

Describe alternatives you've considered
The alternative would be to have some method of decoding the pgadmin username into the necessary permissions, but, doing so locally as I am attempting to do would require I load every user in somehow. Id prefer to keep it to groups.

Additional context

I currently use the server host and username, and from that cat the password out, but a user can currently provide those values on their own by adding their own server to get access to the passwords. Its technically not any less secure than the pgpass passing I was doing previously, which had every hostname/password combo in a publicly accessible file, but I would like to avoid if possible.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions