Home/ Questions/Q 5849399
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-22T12:59:38+00:00

I’m using JDBC to connect to a PostgreSQL database. We are trying to block

  • 0

I’m using JDBC to connect to a PostgreSQL database. We are trying to block access to the database for the users themselves; instead they should be forced to use our frontend. We blocked access to any table, and gave only procedures, which do all the work for users, still not giving them any opportunity to access data directly. We tried to block access to schema pg_catalog, which limits users to procedures we created, but it seems that this access is needed for JDBC to call any procedure.

Anyway, the question is either how to use JDBC without access to pg_catalog, or how to authorize only connections made by application, not user.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    There is no fool proof way but the simplest is to use a username and password for the connection that you do not give to your users. Store the password in an encrypted configuration file. Ofcourse the encryption key can be retrieved from the application by a smart person.

    For a really save system it would probably be best to put a service in front of the database that handles all security and provides a high level API to access the data and let the client connect to this.

    • 0