Re: CREATEDB and CREATEROLE privileges cannot vacuum pg_authid and others

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: gabrieloacapulco(at)gmail(dot)com
Cc: pgsql-bugs(at)postgresql(dot)org
Subject: Re: CREATEDB and CREATEROLE privileges cannot vacuum pg_authid and others
Date: 2008-04-07 06:02:31
Message-ID: 19228.1207548151@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

Gabriel Ramirez <gabrieloacapulco(at)gmail(dot)com> writes:
> Tip: It is good practice to create a role that has the CREATEDB
> and CREATEROLE privileges, but is not a superuser, and then use this
> role for all routine management of databases and roles. This approach
> avoids the dangers of operating as a superuser for tasks that do not
> really require it.

Nowhere does that say, or even suggest, that database-wide vacuuming is
a task that doesn't require superuser.

regards, tom lane

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message Magnus Hagander 2008-04-07 06:54:29 Re: BUG #3983: pgxs files still missing in win32 install (8.3.1)
Previous Message Gabriel Ramirez 2008-04-07 05:55:53 CREATEDB and CREATEROLE privileges cannot vacuum pg_authid and others