yungwarlock
Joined 3 years ago
Joined 3 years ago
The flow is you declare the databases and tables you want to access and the specific permissions you want, an operator reviews it, if accepted it generates a temporary postgres user with those permissions you need. Also, all the connections to the database are proxied through the app, so the domain name and port are random and short-lived, so you don't expose internal database hosts. As an extra, all SQL statements during the user sessions are logged if you want to see that.
It's available at https://github.com/yungwarlock/pam_postgres
My primary goal of this is to drill myself as a product engineer working on a technical product.
Am really glad you enjoy it. Warms my heart.
The game doesn't allow for repeating numbers. My thinking is that not allowing it makes it much easier to pinpoint the numbers. If I think a number exists, it would reduce the number of combinations and the game time.