DB Console Pick a table, or write a query
Tables open as tabs with Data, Structure and DDL. SQL worksheets keep their own tabs; Activity, Maintenance and Audit live in the rail on the left.
Click a cell and type to edit, like a spreadsheet. Enter or F2 edits, Tab and arrows move, Delete sets NULL, Esc cancels. Click a row number to select rows, then Duplicate, Delete or Copy them; Ins adds a row. Nothing reaches the database until Save changes, which applies inserts, edits and deletions in one transaction.
Sorted by size. Dead % is the share of dead tuples autovacuum has not yet reclaimed; mod since analyze is how stale the planner statistics are. VACUUM FULL and REINDEX (non-concurrent) take exclusive locks — run them off-peak. Every operation is audited.
Operators
Every person who can sign in. Roles decide what they can reach; SuperAdmin bypasses grants.
Roles and grants
A grant is connection.schema.table [actions] with
* as the wildcard. DENY always beats ALLOW.
Registered databases
Connections are defined in hlc.dbconsole.connections in the service
configuration, not here. Credentials in a table this screen could write would let a
compromised SuperAdmin session register any reachable database — config keeps that
behind deploy access.
Add a grant
Patterns use * as the only wildcard. A DENY always beats an ALLOW, which
is how you express “everything except these tables” without listing the rest.