Received: from localhost (unknown [200.46.204.183])
	by postgresql.org (Postfix) with ESMTP id 98CF964FE0F
	for <pgsql-admin-postgresql.org@postgresql.org>;
	Wed,  2 Jul 2008 06:30:55 -0300 (ADT)
Received: from postgresql.org ([200.46.204.86])
	by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024)
	with ESMTP id 71422-10 for <pgsql-admin-postgresql.org@postgresql.org>;
	Wed,  2 Jul 2008 06:30:44 -0300 (ADT)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6
Received: from mx38.mail.ru (mx38.mail.ru [194.67.23.16])
	by postgresql.org (Postfix) with ESMTP id 3B14064FD64
	for <pgsql-admin@postgresql.org>; Wed,  2 Jul 2008 06:30:47 -0300 (ADT)
Received: from [195.162.52.178] (port=2555 helo=[192.168.1.1])
	by mx38.mail.ru with asmtp id 1KDyfl-0009xB-00
	for pgsql-admin@postgresql.org; Wed, 02 Jul 2008 13:30:45 +0400
Date: Wed, 2 Jul 2008 16:30:44 +0700
From: sftf <sftf-misc@mail.ru>
X-Mailer: The Bat! (v2.04.7) Business
Reply-To: sftf <sftf-misc@mail.ru>
X-Priority: 3 (Normal)
Message-ID: <1898029110.20080702163044@mail.ru>
To: pgsql-admin@postgresql.org
Subject: Roles as objects in Postgres's security system
MIME-Version: 1.0
Content-Type: text/plain; charset=Windows-1251
Content-Transfer-Encoding: 8bit
X-Spam: Not detected
X-Mras: OK
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Spam-Status: No, hits=0.245 tagged_above=0 required=5 tests=AWL=0.245
X-Spam-Level: 
X-Archive-Number: 200807/22
X-Sequence-Number: 29632

Hi!
My English is bad, so in short - why Postgres (and surprisingly other's, like Oracle) lacks something like this:

1. What roles who can create or delete (insteed solid CREATEROLE privilege)
GRANT { { CREATE | DROP }
    [,...] | ALL [ PRIVILEGES ] }
    ON { {ROLE rolename [, ...]} | ANY ROLE}
    TO { rolename } [, ...] [ WITH ADMIN OPTION ]

2. What in what roles who can alter
GRANT ALTER { LOGIN | PASSWORD | INHERIT | RENAME | VALID | SET | è ò.ä. }
    ON ROLE rolename [, ...]
    TO { rolename } [, ...] [ WITH ADMIN OPTION ]

3. What roles who can grant to whom
GRANT GRANT {ANY | rolename [, ...]} }
    ON ROLE rolename [, ...]
    TO { rolename } [, ...] [ WITH GRANT OPTION ]

Any Help Will Be appreciated!