"In this video, John Martinez shows you how to forbid user table access to prevent data exfiltration and unauthorized access. 👉 What exactly does this policy do? This policy helps avoid the exfiltration of database users from the database and prevents further stealing of credentials by forbidding access to the table where database user information is stored. 👉 Why it matters A common technique during a data breach is to use stolen credentials to find areas where an attacker can elevate their privilege. This is done to exfiltrate and steal valuable data, such as sensitive financial, customer, or employee information. "
This policy bids the reading and potential exfiltration of the user's table in this Postgre database.
I'm gonna go ahead and attempt to access that table, and as you can see, the action has been forbidden.
