Re: [GENERAL] Access Management question - Mailing list pgsql-general

From John R Pierce
Subject Re: [GENERAL] Access Management question
Date
Msg-id 591863dc-11a2-4186-10b2-264cc523901d@hogranch.com
Whole thread Raw
In response to [GENERAL] Access Management question  (chiru r <chirupg@gmail.com>)
List pgsql-general
On 5/30/2017 2:06 PM, chiru r wrote:
Is there any reason, why it is showing roles name as owner of table instead of user?

'user' is a synonym for 'role' with login permission.

    CREATE USER fred;

is exactly the same as...

    CREATE ROLE fred WITH LOGIN;

when you SET ROLE rolename;   its virtually the same as logging in as rolename

Why it is not allowed to GRANT SUPERUSER/CREATEDB etc roles Directly to user (using GRANT ,not ALTER USER) ?


GRANT is used to grant object related permissions or to grant role membership, its not a 'role' nor do roles inherit special attributes like SUPERUSER, CREATEDB.    



-- 
john r pierce, recycling bits in santa cruz

pgsql-general by date:

Previous
From: chiru r
Date:
Subject: [GENERAL] Access Management question
Next
From: Tom Lane
Date:
Subject: Re: [GENERAL] 9.5 "chained equality" behavior