Re: Users, groups and inheritance questions

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Glyn Astill <glynastill(at)yahoo(dot)co(dot)uk>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Users, groups and inheritance questions
Date: 2008-03-28 15:12:29
Message-ID: 9601.1206717149@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Glyn Astill <glynastill(at)yahoo(dot)co(dot)uk> writes:
> I thought that if user 'test' was in group 'admins' and I specified INHERIT then it'd inherit those permissions?

No, inheritance of permissions only works for GRANT-able permissions;
the special role properties like CREATEDB are outside that scope.

I think though that if test does "SET ROLE admins" then she'd be
able to create a database.

regards, tom lane

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Dawid Kuroczko 2008-03-28 15:24:32 Re: Survey: renaming/removing script binaries (createdb, createuser...)
Previous Message brian 2008-03-28 15:03:42 Re: table of US states' neighbours