David Legault wrote:
Hello,
I'm a bit new to Postgre, and I'm experimenting with the roles stuff.
I want to know why If I create a role called "administrator" (a group
basically, no login) :
CREATE ROLE administrator NOSUPERUSER INHERIT NOCREATEDB CREATEROLE;
And then create a user
CREATE ROLE admin LOGIN PASSWORD 'password' ON ROLE administrator;
admin doesn't have the CREATEROLE privilege himself, but because he is
part of a group that has it, why doesn't this fall back on him having it?
When I try to use that admin user to create another role, it says
insufficient privileges.
Am I missing something in this role stuff ?
Thanks
David
Doesn't the inherit property need to be on the role that will do the
inheriting? I.e. if admin is to inherit the privileges of administrator,
then admin needs the inherit property.
"A role with the INHERIT attribute can automatically use whatever
database privileges have been granted to all roles it is directly or
indirectly a member of."
--
Paul Lambert
Database Administrator
AutoLedgers
---------------------------(end of broadcast)---------------------------
TIP 9: In versions below 8.0, the planner will ignore your desire to
choose an index scan if your joining column's datatypes do not
match
