Le jeudi 13 septembre 2007, Tom Lane a écrit :
> Stéphane Schildknecht
<stephane.schildknecht@postgresqlfr.org> writes:
> > It seems the shell command createuser and the SQL CREATE USER don't act
> > the same way,
>
> They aren't really claimed to.
But the man say :
" createuser is a wrapper around the SQL command CREATE ROLE [create_role(7)].
There is no effective difference between creating users via this utility and
via other methods for accessing the server."
> But the difference you point to is
> irrelevant, since a superuser has createrole and createdb privilege
> (and every other privilege) independently of what those columns say.
It is right, but look at this scenario :
CREATE ROLE super SUPERUSER;
ALTER ROLE super NOSUPERUSER;
No RIGHT to CREATEDB.
If superuser is created using commandline, he can still CREATEDB after the
same ALTER ROLE
I think there is 2 options:
- change the manual and keep the actual method.- don't stop asking privilege on createuser (it actually break after
'yes'to
superuser)
or do nothing...
--
Cédric Villemain
Administrateur de Base de Données
Cel: +33 (0)6 74 15 56 53
http://dalibo.com - http://dalibo.org
