I want to know is it advisable to directly use the database user and passwaord as the user of web application generally i have seen everywhere they use a separate table inside database for managing (add/edit/delete) the users .
My question why NOT use the default database user name and password for my web application ?
Note: I want to reuse the user and role system which postgres already provide instead of making a new table of users. I think this will be good because
- reduce the replication of user tables
- not to worry about security password mgmt
- can use roles of postgres to limit the data access
- many other application can directly connect the database (in my case this is important as a desktop application will also access the database still the data will be secured by roles )