From: Tom Lane <tgl@sss.pgh.pa.us>
To: Casey Allen Shobe <cshobe@softhome.net>
Cc: Devrim GUNDUZ <devrim@gunduz.org>
Cc: PostgreSQL Mailing Lists-SQL <pgsql-sql@postgresql.org>
Subject: Re: What am I doing wrong in here?
Date: Sat, 27 Dec 2003 13:50:03 -0500
Message-ID: <12885.1072551003@sss.pgh.pa.us> (raw)
In-Reply-To: <200312271153.20937.cshobe@softhome.net>
References: <Pine.LNX.4.44.0312271740080.26555-100000@emo.org.tr>
<200312271153.20937.cshobe@softhome.net>
Casey Allen Shobe <cshobe@softhome.net> writes:
> Devrim GUNDUZ (Saturday 27 December 2003 10:45)
>> Hmm, that solved the problem, thanks.
>>
>> But I still could not understand why the lack of createuser permission
>> caused the error above...
> Because database users (and lots of other database information) is stored in
> the pg_catalog schema. When you create, alter, or drop a user, you are
> performing an insert, update, or delete on pg_catalog.pg_shadow.
This analysis is nonsense ... system catalog operations do not do the
same kinds of permission checks as user queries do. Furthermore, if
he'd not had permissions to create users, the initial CREATE USER
command would have failed, and so would CREATE DATABASE (since it would
then be specifying a nonexistent owner name).
My guess is that Devrim interpreted your suggestion as telling him to
make the created user (tdmsoftmailserveruser) a superuser, which would
naturally suppress any and all permissions failures for operations
executed by that user. That's hardly a reasonable answer to his problem
though. As to what his real problem is, I dunno, but I'd like to find
out.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: tgl@sss.pgh.pa.us, cshobe@softhome.net, devrim@gunduz.org
Subject: Re: What am I doing wrong in here?
In-Reply-To: <12885.1072551003@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox