Skip site navigation (1) Skip section navigation (2)

Re: CREATEDB and CREATEROLE privileges cannot vacuum pg_authid and others

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: gabrieloacapulco(at)gmail(dot)com
Cc: pgsql-bugs(at)postgresql(dot)org
Subject: Re: CREATEDB and CREATEROLE privileges cannot vacuum pg_authid and others
Date: 2008-04-07 06:02:31
Message-ID: 19228.1207548151@sss.pgh.pa.us (view raw or flat)
Thread:
Lists: pgsql-bugs
Gabriel Ramirez <gabrieloacapulco(at)gmail(dot)com> writes:
>   Tip:  It is good practice to create a role that has the CREATEDB
> and CREATEROLE privileges, but is not a superuser, and then use this
> role for all routine management of databases and roles. This approach
> avoids the dangers of operating as a superuser for tasks that do not
> really require it.

Nowhere does that say, or even suggest, that database-wide vacuuming is
a task that doesn't require superuser.

			regards, tom lane

In response to

pgsql-bugs by date

Next:From: Magnus HaganderDate: 2008-04-07 06:54:29
Subject: Re: BUG #3983: pgxs files still missing in win32 install (8.3.1)
Previous:From: Gabriel RamirezDate: 2008-04-07 05:55:53
Subject: CREATEDB and CREATEROLE privileges cannot vacuum pg_authid and others

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group