Received: from maia.hub.org (maia-5.hub.org [200.46.204.29]) by mail.postgresql.org (Postfix) with ESMTP id 0A841632875 for ; Tue, 24 Aug 2010 23:31:02 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.29]) (amavisd-maia, port 10024) with ESMTP id 87825-05 for ; Wed, 25 Aug 2010 02:30:54 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail.gmx.net (mailout-de.gmx.net [213.165.64.22]) by mail.postgresql.org (Postfix) with SMTP id 4ECEE6326C5 for ; Tue, 24 Aug 2010 23:30:54 -0300 (ADT) Received: (qmail invoked by alias); 25 Aug 2010 02:30:51 -0000 Received: from mue-88-130-54-049.dsl.tropolys.de (EHLO [192.168.0.113]) [88.130.54.49] by mail.gmx.net (mp010) with SMTP; 25 Aug 2010 04:30:51 +0200 X-Authenticated: #14269776 X-Provags-ID: V01U2FsdGVkX18UxIFhNrwUcI2FgICARAAWAxXuzemMlFexNezcsf 3s0ozJjwtEPtYM Message-ID: <4C748099.4030208@gmx.net> Date: Wed, 25 Aug 2010 04:31:53 +0200 From: Andreas User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.2.8) Gecko/20100802 Thunderbird/3.1.2 MIME-Version: 1.0 To: Tom Lane CC: pgsql-admin@postgresql.org Subject: Re: let users change their password References: <4C7461E3.4060006@gmx.net> <9663.1282699748@sss.pgh.pa.us> In-Reply-To: <9663.1282699748@sss.pgh.pa.us> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-1.91 tagged_above=-10 required=5 tests=BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, T_RP_MATCHES_RCVD=-0.01 X-Spam-Level: X-Archive-Number: 201008/204 X-Sequence-Number: 35453 Am 25.08.2010 03:29, schrieb Tom Lane: > Andreas writes: >> how can I let users change their own password but noone else's ? > Uh, that's the normal behavior, no? At least for non-superusers. aaaaaarghl ... right ... 8-} Thanks Tom Now, lets make it more difficult then. Is there a way to have a sub-admin who should be able to create and drop roles as well as change passwords for every user who is non-superuser (or at least not for me and postgres). I prefered not to get locked out when I delegate the user management. Andreas