Re: [GENERAL] Create role question

2005-11-20 Thread Tom Lane
Joachim Wieland <[EMAIL PROTECTED]> writes: > So in effect, if you grant the CREATEROLE privilege, you automatically grant > CREATEDB as well... Not to mention a whole lot of other privileges. CREATEROLE is pretty nearly superuser from a what-can-you-do point of view. It only disables the abilit

[GENERAL] Create role question

2005-11-20 Thread Joachim Wieland
Hi, I wonder if the following behavior is intentional or not: template1=# create role r1 nocreatedb createrole; CREATE ROLE template1=# set role r1; SET template1=> create role r2 createdb; CREATE ROLE template1=> set role r2; SET template1=> create database d1; CREATE DATABASE So in effect, if y