From: | "David Legault" <legault(dot)david(at)gmail(dot)com> |
---|---|
To: | "Alexi Gen" <sqlcatz(at)hotmail(dot)com> |
Cc: | pgsql-general(at)postgresql(dot)org |
Subject: | Re: Role & User - Inheritance |
Date: | 2007-03-15 14:26:35 |
Message-ID: | e0b20d410703150726w5d4d777dm570567cd0c9b9083@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
Unfortunately,
Everything that is a permission (CREATEROLE, etc) when creating a role
cannot be inherited. Only the GRANT stuff is inherited and I think only when
the WITH .. is given on the GRANT.
I may be wrong on the last part though.
David
On 3/15/07, Alexi Gen <sqlcatz(at)hotmail(dot)com> wrote:
>
> [GENERAL] Role & User - Inheritance?
>
> A ROLE dba01 has been given the option of SUPERSUSER.
> A USER user01 is created and tagged to the above ROLE dba01.
> When attempting to create a Tablespace (logged in as user01) it generates
> the following message:
> "permission denied to create tablespace (tblspc01). Must be superuser to
> create a tablespace.".
> Since user01 is tagged to dba01 (who has the SUPERUSER option) - should'nt
> user01 also inherit this? If not - what benefit exists in grouping users
> under a Role?
>
> Cheers!
>
> _________________________________________________________________
> Spice up your IM conversations. New, colorful and animated emoticons. Get
> chatting! http://server1.msn.co.in/SP05/emoticons/
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 6: explain analyze is your friend
>
From | Date | Subject | |
---|---|---|---|
Next Message | Alvaro Herrera | 2007-03-15 14:27:17 | Re: Could you send me a copy of pg8.1beta1?Thank you very much! |
Previous Message | Alvaro Herrera | 2007-03-15 14:22:14 | Re: Lifecycle of PostgreSQL releases |