When connecting to an external PostgreSQL database, the MetaDefender Storage Security database user (mdss) requires the below listed permissions.
MetaDefender Storage Security does NOT require SUPERUSER privileges. A standard application user with the permissions listed below is sufficient
System-Level Privileges:
- CREATEDB - Required for backup and restore operations
Database Permissions:
- OWNER role for the
mdssdatabase - CONNECT privilege on the
mdssdatabase - CONNECT privilege on the
postgressystem database (for administrative operations)
Schema Permissions (public schema):
- USAGE - Access objects in the schema
- CREATE - Create new objects in the schema
Object Permissions (all current and future objects in public schema):
- Tables: SELECT, INSERT, UPDATE, DELETE, TRUNCATE
- Sequences: USAGE, SELECT
- Default privileges for all future tables and sequences
