Re: permission to create user

From: Michael Fuhr <mike(at)fuhr(dot)org>
To: John DeSoi <desoi(at)pgedit(dot)com>
Cc: Timothy Smith <timothy(at)open-networks(dot)net>, pgsql-general(at)postgresql(dot)org
Subject: Re: permission to create user
Date: 2006-07-17 12:23:19
Message-ID: 20060717122318.GA3723@winnie.fuhr.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Mon, Jul 17, 2006 at 07:54:08AM -0400, John DeSoi wrote:
> On Jul 17, 2006, at 2:56 AM, Timothy Smith wrote:
> >is it possible to give a non super user the ability to create
> >another user of a different group?
> >i'm looking for a way to assign a special group of admin's just
> >enough rights to create other lowbie users without letting them
> >bypass all other access restrictions.
>
> You could create a function with the SECURITY DEFINER option which
> allows the function to be executed with the privileges of the user
> that created it.

Also, if you're using 8.1, then giving certain roles the CREATEROLE
attribute might be what you're after.

http://www.postgresql.org/docs/8.1/interactive/role-attributes.html

--
Michael Fuhr

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Martijn van Oosterhout 2006-07-17 12:39:40 Re: postgreSQL installation
Previous Message John DeSoi 2006-07-17 11:54:08 Re: permission to create user