Bug #931: bugs "create user" "alter user"

techi (snieznik(at)interia(dot)pl) reports a bug with a severity of 2
The lower the number the more severe it is.

Short Description
bugs "create user" "alter user"

Long Description

I think i have found a bug . I am using PostgreSQL 7.3.2 on a
platform WindowsXP under cygwin. And the bug looks like :

As a superuser i make a new user called "Paul" with a command :

CREATE USER Paul ;

and that's ok , when i change user , and i am as Paul trying to
create a database or user.

(FIRST METHOD)
CREATE USER Michael ; or CREATE DATABASE school ;
The output is for both commands : PERMISSION DENIED
and that's ok.

BUT when I as a superuser create a new user called "Paul" with
command
(SECOND METHOD)
CREATE USER Paul WITH NOCREATEDB NOCREATEUSER ;
The output is CREATE USER .
and here is a bug .
When I am logged to psql as a new user techi and I am trying
to create a database or create user ---- and unfortunatelly it is working .
Paul is allowed to create a new user acount and a new
database but he couldn't do it !!!!!!!!!!!!!
There is a similar bug , when I create user by the first
method( i am logged to psql as superuser), and after
creating a new user "Robert" I change attributes of a new user account
typing command
ALTER USER Robert WITH CREATEUSER ;
The output is ok .
But something goes wrong , the user Rober is also allowed to
create a database!!!!!!!!!!! he shouldn't do it !!!!!!!

that's all i wanted to tell you .

take care

best regards

techi

Sample Code

No file was uploaded with this report