Skip to main content

Security and connections in PG Studio

Learn how PG Studio connects to your database and ensures safe, controlled access.

Database connection details​

PG Studio connects to your PostgreSQL service using:

  • Database user: The avnadmin user account, which has full read and write access to your databases. You can run SELECT, INSERT, UPDATE, DELETE, and other SQL statements through PG Studio.
  • Access scope: Full database access with the same privileges as the avnadmin user. This is not limited to read-only access.

Security safeguards​

PG Studio ensures safe, controlled access:

  • Single-statement validation: PG Studio allows only one SQL statement per execution.
  • Automatic safety checks: PG Studio validates all generated SQL for safety before execution.
  • Timeouts and limits:
    • Statement timeout: 30 seconds
    • Lock timeout: 10 seconds
    • Connection timeout: 10 seconds
    • Maximum result size: 5,000 rows
  • Encrypted connections: All database connections use SSL/TLS encryption.
  • Rate limiting: One request every two seconds per user per service.

Network access requirements​

Your IP address must be in the service's IP allowlist. PG Studio validates your browser's IP address, which must be allowed in the service's IP filter configuration.

If you get the Access is not allowed from the IP address error, add your IP address to the allowlist.

Required permissions​

To use PG Studio, you need the service:data:write permission at the organization, unit, or project level. This permission is included in the Admin, Developer, and Operator roles.