Working with secrets and pgservice config

Ask the Community
1

Hi I need help with a postgres connection via qfield cloud.

I can connect to my postgres server and sync, but when adding other users I get variable results.

I think maybe I am setting up the secrets incorrectly?

I am setting up a secret per user at the organisation level using the the same service name.

ie my organisation secrets looks like the below, with each user having different permissions in postgres. The bottom secret is a dedicated readonly login to postgres and I have left the user blank as i assume that makes it a catch all for non-listed users?

Is this the correct method?

As mentioned I have managed to link to postgres using this and sync offline files, but it is not reliable and I think it depends on which user was last added. the readonly(bottom) one doesn’t appear to work at all.

I have not had success with online files at all.

any assistance would be gratefully appreciated.

thanks

qfield org secrets
qfield org secrets1037×831 40.3 KB

2

Hi @damstep - You do not have to use “Assigned to” Just leave it blank. Create the secret one time.
Is it for a project or in general ? What is your workflow? What are you trying to achieve?

3

Thanks Beanzmo.

I was looking to use postgres permissions for different users and thought that I could do it through multiple secrets to the same dbase, but i think that was tripping things up?

I have since set up a single secret for the organisation and that is working ok with permissions controlled by qfield through different teams.

qfield is being used on windows and for android with users who dont wnat/need the full qgis interface. within the business we use single sign on (SSO) for postgres, with a pg_service setup, which is working well. I assume that qfield is just dropping down the project file to windows and handing off the permissions to the service file directly rather than passing the auth request through secret on the cloud?

I am told that i can use a pg service file for android as well but cant figure out how that interacts with qfield, or whether it goes direct in the same way I assume windows handles it, or the request goes via the cloud.

our pg server is set up to only accept sha256 from the qfield web address and SSO for local network requests, and I am told I cant have both SSO and SHA256 authentication locally. is that your understanding?

sorry . long post .
thanks in advance.