Hacker News new | ask | show | jobs
by Falmarri 876 days ago
Do you mean setting a database user account? As in the oracle user? Why is that exposed over the web?
1 comments

There is/was a school of thought that each user should have their own database account, and the application should connect to the database as that user. The advantage being you can use the database's built-in user and role management and privileges instead of having to invent your own. I have admittedly not seen this done much, but there is a certain appeal to it.
I work for a company that is trying to bolt this functionality onto all the AWS database products. At least at the IAM role level.

As it stands now, no human can write to a DB in prod-- only service accounts.