Received: from localhost (unknown [200.46.204.183]) by developer.postgresql.org (Postfix) with ESMTP id 836AB2E0038 for ; Fri, 13 Jun 2008 12:11:50 -0300 (ADT) Received: from developer.postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 76867-01 for ; Fri, 13 Jun 2008 12:11:46 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from sss.pgh.pa.us (sss.pgh.pa.us [66.207.139.130]) by developer.postgresql.org (Postfix) with ESMTP id 70D2D2E002D for ; Fri, 13 Jun 2008 12:11:46 -0300 (ADT) Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.2/8.14.2) with ESMTP id m5DFBgqI011209; Fri, 13 Jun 2008 11:11:42 -0400 (EDT) To: "Milen A. Radev" cc: "Rafael Domiciano" , pgsql-admin@postgresql.org Subject: Re: Revoke for a new role In-reply-to: References: <3a0028490806130635v2a0890easf8c22b8362d06e89@mail.gmail.com> Comments: In-reply-to "Milen A. Radev" message dated "Fri, 13 Jun 2008 17:05:06 +0300" Date: Fri, 13 Jun 2008 11:11:42 -0400 Message-ID: <11208.1213369902@sss.pgh.pa.us> From: Tom Lane X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200806/111 X-Sequence-Number: 29449 "Milen A. Radev" writes: > Rafael Domiciano написа: >> I need to create a role (Postgres user) that cannot drop or create table, >> but can create TEMP tables. This role must do I, U and D normally. > For a role to be able to create tables (and other objects) it should > have "CREATE" privilege on the _schema_ in question. More specifically, what you're going to need to do is revoke "public" create access on the public schema, and then selectively grant it to everyone you want to have it. There's no notion of "everyone but X gets this privilege". regards, tom lane