alexvasseur/postgresql-cf-service-broker

binding is shared

alexvasseur opened this issue · 3 comments

unlike p-mysql the binding info is shared and not unique across binding with multi user and grand mechanics
this is not ideal for revoke - but at the same time note that an app granted access one day could create another user to keep that user unless privileges are not allowing this specific scenario which is more work

see attached - after 1 service + 1 binding

screen shot 2017-03-16 at 00 38 52

screen shot 2017-03-16 at 00 38 26

To be confirmed
2 sb looks like this:

postgres://0a10ba1b-5c00-4434-89b8-498ecb66d0d7:5fm0s88197krjuq8fl9f51a32e@XXX:5432/0a10ba1b-5c00-4434-89b8-498ecb66d0d7"

postgres://0a10ba1b-5c00-4434-89b8-498ecb66d0d7:i5h1bf3aohaibf17l4k9c5gukd@XXX:5432/0a10ba1b-5c00-4434-89b8-498ecb66d0d7

may be an unbind will also drop the db schema for the other bound service - which is really bad

fixed in 3.0