Cookies

With your permission, we use Google Analytics cookies to measure visits and improve the site. Necessary cookies are always on. You can change your choice or withdraw consent anytime in the footer, under Cookie settings. Cookie Policy

Skip to content

security-privileges

Grant only the minimum permissions required. Never use superuser for application queries.

  • Skills
  • Databases
  • 0

What it does and how to use it

A skill that teaches Claude Code to do databases tasks well. It is packaged knowledge the model uses whenever it is relevant.

  1. Install the skill (command above).
  2. In Claude Code, describe what you need - the skill turns on by itself when the context fits.
  3. No commands to memorize: you talk in plain language and the skill does the rest.

Install (Claude Code)

mkdir -p .claude/skills/security-privileges && curl -fsSL https://doutorai.pt/data/lib/skills__security-privileges.md -o .claude/skills/security-privileges/SKILL.md

Paste this command into the terminal, in your project folder, and the component installs automatically.

Content

---
title: Apply Principle of Least Privilege
impact: MEDIUM
impactDescription: Reduced attack surface, better audit trail
tags: privileges, security, roles, permissions
---

## Apply Principle of Least Privilege

Grant only the minimum permissions required. Never use superuser for application queries.

**Incorrect (overly broad permissions):**

```sql
-- Application uses superuser connection
-- Or grants ALL to application role
grant all privileges on all tables in schema public to app_user;
grant all privileges on all sequences in schema public to app_user;

-- Any SQL injection becomes cata

- 🔒 Full content on the Pro plan (€7.99/month) -

Need help with Claude Code?

Ask Dr AI - it explains things simply.

Need a tailor-made solution?

Not sure where to start with AI in your business? Get a free assessment and a tailored plan - no commitment.

Save hours every week with AI, no hassle

Doutor AI gives you 1,859 ready-to-copy AI prompts, by industry and in plain English - plus a complete technical library for those who want to go further.

See plans