Re: a group of superuser - Mailing list pgsql-general

From Richard Huxton
Subject Re: a group of superuser
Date
Msg-id 200403091653.26276.dev@archonet.com
Whole thread Raw
In response to Re: a group of superuser  (Peter Eisentraut <peter_e@gmx.net>)
List pgsql-general
On Tuesday 09 March 2004 15:02, Peter Eisentraut wrote:
> sferriol wrote:
> > i'm creating a database with different groups of users.
> > but i have one group which is the administrators of the system.
> > i would like to enable all members of this group to have the rights
> > to create another users.
> >
> > how can i do that with a GROUP in postgres?
>
> It's not possible.

However, you probably could:
1. write a function (as a superuser) that creates users
2. let it run with the permissions of the creator
3. grant access to your target group.

You'll want to read up on the SECURITY DEFINER attributes of CREATE FUNCTION
and probably the EXECUTE command of plpgsql.

Note - I haven't tried this myself, so if it does work it would be helpful to
let the list know.
--
  Richard Huxton
  Archonet Ltd

pgsql-general by date:

Previous
From: Shalu Gupta
Date:
Subject: dontExecute Flag
Next
From: Stephan Szabo
Date:
Subject: Re: Expression indexes and casts