Comment by riffraff
19 hours ago
this seems great. I wonder tho, how do you ensure new columns are masked by default? It seems a safer alternative would be to start with all columns being statically masked and only unveil them selectively.
I guess you can add some CI steps when modifying the db to ensure a give column is allowed or masked, but still, would be nice if this was defaulted the other way around.
This is called "Privacy By Default"
https://postgresql-anonymizer.readthedocs.io/en/stable/priva...