Received: from localhost (unknown [200.46.204.183]) by developer.postgresql.org (Postfix) with ESMTP id 09C7A2E0053 for ; Fri, 13 Jun 2008 11:05:45 -0300 (ADT) Received: from developer.postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 03773-07 for ; Fri, 13 Jun 2008 11:05:30 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) by developer.postgresql.org (Postfix) with ESMTP id E826E2E004E for ; Fri, 13 Jun 2008 11:05:35 -0300 (ADT) Received: from list by ciao.gmane.org with local (Exim 4.43) id 1K79uE-0003ie-8S for pgsql-admin@postgresql.org; Fri, 13 Jun 2008 14:05:30 +0000 Received: from 83.228.70.60 ([83.228.70.60]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 13 Jun 2008 14:05:30 +0000 Received: from milen by 83.228.70.60 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Fri, 13 Jun 2008 14:05:30 +0000 X-Injected-Via-Gmane: http://gmane.org/ To: pgsql-admin@postgresql.org From: "Milen A. Radev" Subject: Re: Revoke for a new role Date: Fri, 13 Jun 2008 17:05:06 +0300 Lines: 24 Message-ID: References: <3a0028490806130635v2a0890easf8c22b8362d06e89@mail.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: 83.228.70.60 User-Agent: Thunderbird 2.0.0.14 (Windows/20080421) In-Reply-To: <3a0028490806130635v2a0890easf8c22b8362d06e89@mail.gmail.com> X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=1.599 tagged_above=0 required=5 tests=RCVD_IN_DNSWL_LOW=-1, RCVD_NUMERIC_HELO=2.599 X-Spam-Level: * X-Archive-Number: 200806/110 X-Sequence-Number: 29448 Rafael Domiciano написа: > Hi folks, > > I'm new in this mailing list. > > I need to create a role (Postgres user) that cannot drop or create table, > but can create TEMP tables. This role must do I, U and D normally. > > I have read some docs over the web and discovered that option to revoke > "create table" doesn't exist. > > Can someone give me a light?! For a role to be able to create tables (and other objects) it should have "CREATE" privilege on the _schema_ in question. As for creating temporary tables - "TEMP" ("TEMPORARY") privilege on the _database_ in question. Please check http://www.postgresql.org/docs/current/static/sql-grant.html for details. -- Milen A. Radev