You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Pass "shared-server" flag and groups used to allow access to shared server to SERVER_PASSEXEC_COMMANDS commands #10703
When using oauth to log in and connect to a shared server, the passexec works great, however, to be completely secure, id love some method of guaranteeing that the user has access to the provided server via either a "This was shared to me" variable, and or, a variable containing the group(s) that the user had that granted them access to that server.
(I suspect passing the full groups list as well would be desired by some)
Describe alternatives you've considered
The alternative would be to have some method of decoding the pgadmin username into the necessary permissions, but, doing so locally as I am attempting to do would require I load every user in somehow. Id prefer to keep it to groups.
Additional context
I currently use the server host and username, and from that cat the password out, but a user can currently provide those values on their own by adding their own server to get access to the passwords. Its technically not any less secure than the pgpass passing I was doing previously, which had every hostname/password combo in a publicly accessible file, but I would like to avoid if possible.
Activity
Rebuild the password exec command when the owner's server group chang…
Rebuild the password exec command before restoring a cached manager's…
Tell server-mode password exec commands whether the server was shared…
dpage commentedon Nov 6, 2026
Fixed in d9647f9 (#10738).