Roles as objects in Postgres's security system

From: sftf <sftf-misc(at)mail(dot)ru>
To: pgsql-admin(at)postgresql(dot)org
Subject: Roles as objects in Postgres's security system
Date: 2008-07-02 09:30:44
Message-ID: 1898029110.20080702163044@mail.ru
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Hi!
My English is bad, so in short - why Postgres (and surprisingly other's, like Oracle) lacks something like this:

1. What roles who can create or delete (insteed solid CREATEROLE privilege)
GRANT { { CREATE | DROP }
[,...] | ALL [ PRIVILEGES ] }
ON { {ROLE rolename [, ...]} | ANY ROLE}
TO { rolename } [, ...] [ WITH ADMIN OPTION ]

2. What in what roles who can alter
GRANT ALTER { LOGIN | PASSWORD | INHERIT | RENAME | VALID | SET | и т.д. }
ON ROLE rolename [, ...]
TO { rolename } [, ...] [ WITH ADMIN OPTION ]

3. What roles who can grant to whom
GRANT GRANT {ANY | rolename [, ...]} }
ON ROLE rolename [, ...]
TO { rolename } [, ...] [ WITH GRANT OPTION ]

Any Help Will Be appreciated!

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message kartik 2008-07-02 14:59:02 query
Previous Message kevin kempter 2008-07-02 02:13:39 strange drop errors