Re: Create role question

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Joachim Wieland <joe(at)mcknight(dot)de>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Create role question
Date: 2005-11-20 16:53:15
Message-ID: 28894.1132505595@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Joachim Wieland <joe(at)mcknight(dot)de> writes:
> So in effect, if you grant the CREATEROLE privilege, you automatically grant
> CREATEDB as well...

Not to mention a whole lot of other privileges. CREATEROLE is pretty
nearly superuser from a what-can-you-do point of view. It only disables
the ability to actively break the database system (eg by directly
modifying system catalogs).

regards, tom lane

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Tino Wildenhain 2005-11-20 16:55:50 Re: Mambo (CMS) & PostgreSQL
Previous Message Michael Fuhr 2005-11-20 15:40:51 Re: Implementing rounding rule in plpgsql