Re: New to postgresql - Do I have to be a "superuser" to be able to create a database?

From: Vincent Veyron <vv(dot)lists(at)wanadoo(dot)fr>
To: gromitracer <george_m_se(at)yahoo(dot)com>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: New to postgresql - Do I have to be a "superuser" to be able to create a database?
Date: 2014-01-06 21:23:14
Message-ID: 1389043394.2442.36.camel@asus-1001PX.home
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Le dimanche 05 janvier 2014 à 19:32 -0800, gromitracer a écrit :

> Below are my roles/users and their attributes. Posgresql version: 9.2
>
> Role name | Attributes
> | Member of
> ---------------+-------------------------------------------------------------------------------+----------------
> devs | Create DB, Cannot login
> | {}
> batman |
> | {devs}
> postgres | Superuser, Create role, Create DB, Replication |
> {}
>
>
> As you can see:
> role: DEVS is configured to be able to create a database.
> user: batman is member of DEVS
>
> However, when I login as batman and I issue the command "CREATE DATABASE
> metropolis;" I get a Permission denied. Even when I give DEVS a "superuser"
> attribute, user batman still cannot create a database. Do I have to elevate
> user batman to a superuser? Isn't that dangerous when it comes to security?
>

No need to be a superuser; see the CREATEDB clause in :

http://www.postgresql.org/docs/9.3/static/sql-createrole.html

You probably will also need to study :

http://www.postgresql.org/docs/9.3/static/sql-grant.html

--
http://litigios.libremen.com
Gestión de litigios y de expedientes de seguros de siniestros para el
servicio jurídico

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Tom Lane 2014-01-06 21:42:17 Re: authentication failure
Previous Message Jeff Janes 2014-01-06 19:58:12 Re: New to postgresql - Do I have to be a "superuser" to be able to create a database?