omfgppc - 2008-02-19

cryan wrote: The privilege enforcement is done mostly through the application. If you are concerned about people logging into the database directly using a third-party tool, such as PgAdmin, then you should turn on enhanced authentication for those users that you do not wish to access the database directly. Enhanced authentication uses a double hashed password so that the same password a user uses to log in to the database if different from the password needed to use a third-party tool. -- Read more at