Hadeur

Soo.. since i couldn't really find answers so far:

Is there a way to share QGIS-project files that contain *encrypted* database connections? (Maybe storing them in the PG-DB..?)

..and/or to share the authentication database between clients so that the user doesn't have to pick/remember a password.

Is there maybe even a comparable thing to Esri SDE-files?

I worked quite a bit with QGIS a few years ago but these aspects of deploying it to multiple client PCs are quite unclear to me, so far.🙆‍♂️

#qgis #gischat

May 26 at 4:11pmWeb
Show threadIan Turton3d ago
@Hadeur that sounds like a bad idea. Different users should have distinct credentials so you can tell who did what to your database.
Show threadHadeur3d ago

@ianturton That's how my colleagues did it for the main deployment, but that's a whole other can of worms.😬

In my case, qgis only holds a copy of the objects for visual representation, changes in the main database can be tracked (geometry is stored as WKT). Right now the system is Software1 + ArcGIS EGDB and we switch to QGIS so that influences my thinking.

Show threadBarry Rowlingson3d ago
@Hadeur there's little point sharing encrypted credentials since they have to be decrypted for qgis to use. If qgis can decrypt them, then the user can get them.
Show threadJörn Franke3d ago

@Hadeur You can share them in encrypted @keepassxc databases.

Nevertheless, it is usually better to provide each user their own credentials

Show threadcartocalypse3d ago
@Hadeur what exactly is your requirement?
Show threadHadeur2d ago

@cartocalypse

Right now we use a few .mxd projects, shared on a network drive, that can be used by multiple people for editing/viewing features in a esri egdb (without exposing the db password).

We don't need more than two db-users with rw-/r-permissions. The GIS is mainly used for the graphical presentation side and editing of the geometry in cooperation with another software with its own database.

I'd like to reproduce this with QGIS, but, the more i read about it, it seems we have to do things very differently (pg_service.conf, .pgpass, other ways of authentication to the PostGIS db..?) and there is not the "easy" solution I hoped for.😬

Show threadcartocalypse2d ago

@Hadeur
I don't think there is a way that completely prevents users from being able to get to the credentials.

Maybe check out --authdbdirectory?

I often use per-user credentials but stored in a authcfg of the same name in each user profile. That way the QGIS projects can reference authcfg "foo" and each user has their own, safe credentials in their own authcfg "foo".