Date: Thu, 20 Dec 2012 14:45:22 +0000 (UTC)
From: Lou Picciano <loupicciano@comcast.net>
To: pgsql-admin@postgresql.org, Ray Stell <stellr@vt.edu>
Message-ID: 
 <202373801.1595767.1356014722327.JavaMail.root@sz0093a.westchester.pa.mail.comcast.net>
In-Reply-To: <20121220143127.GA7932@cns.vt.edu>
Subject: Re: create role?
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_1595766_1067676111.1356014722326"
Precedence: bulk
Sender: pgsql-admin-owner@postgresql.org

------=_Part_1595766_1067676111.1356014722326
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Ray, 


PostgreSQL has a very powerful implementation of the ROLE/privileges model. Its control can be very granular, and very intricate! You really want to review your application's privileges/security needs before doing GRANTs with abandon. 


To get what you need, though, the 'db user' simply needs the CREATEROLE privilege set. 


Lou Picciano 

----- Original Message -----
From: "Ray Stell" <stellr@vt.edu> 
To: pgsql-admin@postgresql.org 
Sent: Thursday, December 20, 2012 9:31:27 AM 
Subject: [ADMIN] create role? 

I have a app where the install guide says to give a db user the ability to create roles. 
"Ensure that the user has permission to create database objects and can create roles." 
How is that done...elegantly? Seems like the oracle idea of a role. 


-- 
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) 
To make changes to your subscription: 
http://www.postgresql.org/mailpref/pgsql-admin 

------=_Part_1595766_1067676111.1356014722326
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><style type=3D'text/css'>p { margin: 0; }</style></head><body><=
div style=3D'font-family: Verdana; font-size: 12pt; color: #000000'>Ray,<di=
v><br></div><div>PostgreSQL has a very powerful implementation of the ROLE/=
privileges model. Its control can be very granular, and very&nbsp;<span sty=
le=3D"font-size: 12pt;">intricate! You really want to review your applicati=
on's privileges/security needs before doing GRANTs with abandon.</span></di=
v><div><span style=3D"font-size: 12pt;"><br></span></div><div><span style=
=3D"font-size: 12pt;">To get what you need, though, the 'db user' simply ne=
eds the CREATEROLE privilege set.</span></div><div><span style=3D"font-size=
: 12pt;"><br></span></div><div><span style=3D"font-size: 12pt;">Lou Piccian=
o</span></div><div><br><hr id=3D"zwchr"><b>From: </b>"Ray Stell" &lt;stellr=
@vt.edu&gt;<br><b>To: </b>pgsql-admin@postgresql.org<br><b>Sent: </b>Thursd=
ay, December 20, 2012 9:31:27 AM<br><b>Subject: </b>[ADMIN] create role?<br=
><br>I have a app where the install guide says to give a db user the abilit=
y to create roles.<br>"Ensure that the user has permission to create databa=
se objects and can create roles." &nbsp;<br>How is that done...elegantly? &=
nbsp;Seems like the oracle idea of a role.<br><br><br>-- <br>Sent via pgsql=
-admin mailing list (pgsql-admin@postgresql.org)<br>To make changes to your=
 subscription:<br>http://www.postgresql.org/mailpref/pgsql-admin<br></div><=
/div></body></html>
------=_Part_1595766_1067676111.1356014722326--