Re: Revoke for a new role - Mailing list pgsql-admin

From Tom Lane
Subject Re: Revoke for a new role
Date
Msg-id 11208.1213369902@sss.pgh.pa.us
Whole thread Raw
In response to Re: Revoke for a new role  ("Milen A. Radev" <milen@radev.net>)
Responses Re: Revoke for a new role  ("Rafael Domiciano" <rafael.domiciano@gmail.com>)
List pgsql-admin
"Milen A. Radev" <milen@radev.net> writes:
> Rafael Domiciano написа:
>> I need to create a role (Postgres user) that cannot drop or create table,
>> but can create TEMP tables. This role must do I, U and D normally.

> For a role to be able to create tables (and other objects) it should
> have "CREATE" privilege on the _schema_ in question.

More specifically, what you're going to need to do is revoke "public"
create access on the public schema, and then selectively grant it to
everyone you want to have it.  There's no notion of "everyone but X
gets this privilege".

            regards, tom lane

pgsql-admin by date:

Previous
From: "Milen A. Radev"
Date:
Subject: Re: Revoke for a new role
Next
From: "Rafael Domiciano"
Date:
Subject: Re: Revoke for a new role