Heiko Schroeder <heikos(at)foni(dot)net> writes:
> Especially when the superuser postmaster creates a database, e.g. test, a
> normal user although he is *not* the owner, if it is not denied that he can
> create new databases AND that he can create new users,
A user that can create new users is a superuser; there is no distinction
in Postgres. As a superuser, there are no protection restrictions on
him.
regards, tom lane