Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id 3304565003C for ; Tue, 29 Jul 2008 16:10:27 -0300 (ADT) Received: from postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 71234-03 for ; Tue, 29 Jul 2008 16:09:56 -0300 (ADT) Received: from mx1.hub.org (mx1.hub.org [200.46.208.106]) by postgresql.org (Postfix) with ESMTP id 6E10864FD0A for ; Tue, 29 Jul 2008 16:09:58 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from sss.pgh.pa.us (sss.pgh.pa.us [66.207.139.130]) by mx1.hub.org (Postfix) with ESMTP id 8A03EB075D8 for ; Tue, 29 Jul 2008 16:09:55 -0300 (ADT) Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.2/8.14.2) with ESMTP id m6TJ8cPS014382; Tue, 29 Jul 2008 15:08:38 -0400 (EDT) To: Carol Walter cc: pgsql-admin@postgresql.org Subject: Re: Privileges & roles In-reply-to: <489E0305-8EF8-43B5-81C0-D168A1D30C15@indiana.edu> References: <489E0305-8EF8-43B5-81C0-D168A1D30C15@indiana.edu> Comments: In-reply-to Carol Walter message dated "Tue, 29 Jul 2008 11:47:37 -0400" Date: Tue, 29 Jul 2008 15:08:38 -0400 Message-ID: <14381.1217358518@sss.pgh.pa.us> From: Tom Lane X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0 tagged_above=0 required=5 tests=none X-Spam-Level: X-Archive-Number: 200807/224 X-Sequence-Number: 29834 Carol Walter writes: > How do you make a user that can only create temporary tables? Well, you grant them TEMP privilege on the database, and you revoke everything else. I suspect the key bit you're missing is to revoke public CREATE privilege on the "public" schema. regards, tom lane