From: Lou Picciano <loupicciano@comcast.net>
To: pgsql-admin@postgresql.org, Ray Stell <stellr@vt.edu>
Subject: Re: create role?
Date: Thu, 20 Dec 2012 14:45:22 +0000 (UTC)
Message-ID: <202373801.1595767.1356014722327.JavaMail.root@sz0093a.westchester.pa.mail.comcast.net> (raw)
In-Reply-To: <20121220143127.GA7932@cns.vt.edu>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
Ray,
PostgreSQL has a very powerful implementation of the ROLE/privileges model. Its control can be very granular, and very intricate! You really want to review your application's privileges/security needs before doing GRANTs with abandon.
To get what you need, though, the 'db user' simply needs the CREATEROLE privilege set.
Lou Picciano
----- Original Message -----
From: "Ray Stell" <stellr@vt.edu>
To: pgsql-admin@postgresql.org
Sent: Thursday, December 20, 2012 9:31:27 AM
Subject: [ADMIN] create role?
I have a app where the install guide says to give a db user the ability to create roles.
"Ensure that the user has permission to create database objects and can create roles."
How is that done...elegantly? Seems like the oracle idea of a role.
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: loupicciano@comcast.net, stellr@vt.edu
Subject: Re: create role?
In-Reply-To: <202373801.1595767.1356014722327.JavaMail.root@sz0093a.westchester.pa.mail.comcast.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox