Re: Role & User - Inheritance

From: "David Legault" <legault(dot)david(at)gmail(dot)com>
To: "Alexi Gen" <sqlcatz(at)hotmail(dot)com>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Role & User - Inheritance
Date: 2007-03-15 14:26:35
Message-ID: e0b20d410703150726w5d4d777dm570567cd0c9b9083@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Unfortunately,

Everything that is a permission (CREATEROLE, etc) when creating a role
cannot be inherited. Only the GRANT stuff is inherited and I think only when
the WITH .. is given on the GRANT.

I may be wrong on the last part though.

David

On 3/15/07, Alexi Gen <sqlcatz(at)hotmail(dot)com> wrote:
>
> [GENERAL] Role & User - Inheritance?
>
> A ROLE dba01 has been given the option of SUPERSUSER.
> A USER user01 is created and tagged to the above ROLE dba01.
> When attempting to create a Tablespace (logged in as user01) it generates
> the following message:
> "permission denied to create tablespace (tblspc01). Must be superuser to
> create a tablespace.".
> Since user01 is tagged to dba01 (who has the SUPERUSER option) - should'nt
> user01 also inherit this? If not - what benefit exists in grouping users
> under a Role?
>
> Cheers!
>
> _________________________________________________________________
> Spice up your IM conversations. New, colorful and animated emoticons. Get
> chatting! http://server1.msn.co.in/SP05/emoticons/
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 6: explain analyze is your friend
>

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Alvaro Herrera 2007-03-15 14:27:17 Re: Could you send me a copy of pg8.1beta1?Thank you very much!
Previous Message Alvaro Herrera 2007-03-15 14:22:14 Re: Lifecycle of PostgreSQL releases