Re:PostgreSQL and UUID as Primary Key
by hipadev23 on Friday July 05, 2024 @10:50PM
(#40887850)
UUIDv7 has 74 bits of randomness per millisecond. Nobody is guessing these IDs either. The only “risk” is leaking of creation time, as mentioned in numerous other comments.
All that aside, a user possessing a matching UUID alone shouldn’t grant them access anyway. You’d still rely on the same authentication and authorization mechanisms as if their ID was a simple sequence.
All that aside, a user possessing a matching UUID alone shouldn’t grant them access anyway. You’d still rely on the same authentication and authorization mechanisms as if their ID was a simple sequence.