Received: from maia.hub.org (maia-2.hub.org [200.46.204.251])
	by mail.postgresql.org (Postfix) with ESMTP id 617DA632FFD
	for <pgsql-admin-postgresql.org@mail.postgresql.org>;
	Tue, 24 Aug 2010 23:38:06 -0300 (ADT)
Received: from mail.postgresql.org ([200.46.204.86])
	by maia.hub.org (mx1.hub.org [200.46.204.251]) (amavisd-maia,
	port 10024) with ESMTP id 28708-10 for
	<pgsql-admin-postgresql.org@mail.postgresql.org>;
	Wed, 25 Aug 2010 02:37:57 +0000 (UTC)
X-Greylist: from auto-whitelisted by SQLgrey-1.7.6
Received: from sss.pgh.pa.us (sss.pgh.pa.us [66.207.139.130])
	by mail.postgresql.org (Postfix) with ESMTP id 320B9632998
	for <pgsql-admin@postgresql.org>; Tue, 24 Aug 2010 23:37:59 -0300 (ADT)
Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1])
	by sss.pgh.pa.us (8.14.2/8.14.2) with ESMTP id o7P2buqG010517;
	Tue, 24 Aug 2010 22:37:56 -0400 (EDT)
To: Andreas <maps.on@gmx.net>
cc: pgsql-admin@postgresql.org
Subject: Re: let users change their password 
In-reply-to: <4C748099.4030208@gmx.net> 
References: <4C7461E3.4060006@gmx.net> <9663.1282699748@sss.pgh.pa.us>
	<4C748099.4030208@gmx.net>
Comments: In-reply-to Andreas <maps.on@gmx.net>
	message dated "Wed, 25 Aug 2010 04:31:53 +0200"
Date: Tue, 24 Aug 2010 22:37:55 -0400
Message-ID: <10516.1282703875@sss.pgh.pa.us>
From: Tom Lane <tgl@sss.pgh.pa.us>
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Spam-Status: No, hits=-1.91 tagged_above=-10 required=5 tests=BAYES_00=-1.9,
	T_RP_MATCHES_RCVD=-0.01
X-Spam-Level: 
X-Archive-Number: 201008/205
X-Sequence-Number: 35454

Andreas <maps.on@gmx.net> writes:
> Now, lets make it more difficult then.
> Is there a way to have a sub-admin who should be able to create and drop 
> roles as well as change passwords for every user who is  non-superuser  
> (or at least not for me and postgres).

Yeah, in recent releases an account with CREATEROLE privilege acts like
that.

			regards, tom lane