[Qgis-user] Save projects to DB without creator's permissions

[Cliff Patterson]

What is the best approach to save QGIS projects to PostgreSQL
without saving the project-creator's credentials/permissions? If the DB
admin creates a project and saves it to the DB, anyone opening that project
will attain the admin's permissions on layers in that map.

To recreate:

1) Create a map containing PostGIS layers and save project to DB. All
layers should be editable by the admin. Admin is logged into DB with auth
config, not basic auth.
2) Create a new read-only user and new profile in QGIS and log in to DB.
3) Open the project and try to edit layers. Read-only user will be able to
see and edit all layers just like the DB Admin.

Is there a way to save projects to DB WITHOUT saving any user
creds/permissions?

Cliff

-- 

Cliff Patterson Ph.D.

*PSD* | Senior GIS Consultant
P: 519-690-2565 ext. 2616
www.psdrcs.com
London | 148 Fullarton St. 9th Floor
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/qgis-user/attachments/20200529/0203635e/attachment.html>