As is shown,I login as u-mx_3 (CREATEROLE,NOCREATEDB),and I can't create DB;However,I can create a role with the pri CREATEDB,and it works!!
So, why a role with NOCREATEDB can create a role who can create DB?