Le jeudi 13 septembre 2007, Tom Lane a écrit :
> > It seems the shell command createuser and the SQL CREATE USER don't act
> > the same way,
> They aren't really claimed to.
But the man say :
" createuser is a wrapper around the SQL command CREATE ROLE [create_role(7)].
There is no effective difference between creating users via this utility and
via other methods for accessing the server."
> But the difference you point to is
> irrelevant, since a superuser has createrole and createdb privilege
> (and every other privilege) independently of what those columns say.
It is right, but look at this scenario :
CREATE ROLE super SUPERUSER;
ALTER ROLE super NOSUPERUSER;
No RIGHT to CREATEDB.
If superuser is created using commandline, he can still CREATEDB after the
same ALTER ROLE
I think there is 2 options:
- change the manual and keep the actual method.
- don't stop asking privilege on createuser (it actually break after 'yes' to
or do nothing...
Administrateur de Base de Données
Cel: +33 (0)6 74 15 56 53
http://dalibo.com - http://dalibo.org
In response to
pgsql-bugs by date
|Next:||From: Boris||Date: 2007-09-16 01:08:57|
|Subject: BUG #3610: Vaccum stop and can not continue|
|Previous:||From: Bruce Momjian||Date: 2007-09-14 03:06:54|
|Subject: Re: psql \COPY accepts multiple NULL AS|