From: Rafael Domiciano <rafael.domiciano@gmail.com>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Milen A. Radev <milen@radev.net>
Cc: pgsql-admin@postgresql.org
Subject: Re: Revoke for a new role
Date: Fri, 13 Jun 2008 13:06:31 -0300
Message-ID: <3a0028490806130906i553f9588g810b2d19d95a91a1@mail.gmail.com> (raw)
In-Reply-To: <11208.1213369902@sss.pgh.pa.us>
References: <3a0028490806130635v2a0890easf8c22b8362d06e89@mail.gmail.com>
<g2tur0$rtq$1@ger.gmane.org>
<11208.1213369902@sss.pgh.pa.us>
So, there is no manner to define that the user can't do create or drop
objects, but can create temp tables?
I have to do it manually?
I have been reading about a patch that increment the CREATE ROLE clausule,
called "PATCH NOCREATETABLE"...
This patch is what I need... someone had already hear some about?
2008/6/13 Tom Lane <tgl@sss.pgh.pa.us>:
> "Milen A. Radev" <milen@radev.net> writes:
> > Rafael Domiciano написа:
> >> I need to create a role (Postgres user) that cannot drop or create
> table,
> >> but can create TEMP tables. This role must do I, U and D normally.
>
> > For a role to be able to create tables (and other objects) it should
> > have "CREATE" privilege on the _schema_ in question.
>
> More specifically, what you're going to need to do is revoke "public"
> create access on the public schema, and then selectively grant it to
> everyone you want to have it. There's no notion of "everyone but X
> gets this privilege".
>
> regards, tom lane
>
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: rafael.domiciano@gmail.com, tgl@sss.pgh.pa.us, milen@radev.net
Subject: Re: Revoke for a new role
In-Reply-To: <3a0028490806130906i553f9588g810b2d19d95a91a1@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox