Re: Any way to have CREATEUSER privs without having all privs? - Mailing list pgsql-general

From Tom Lane
Subject Re: Any way to have CREATEUSER privs without having all privs?
Date
Msg-id 6596.1073173257@sss.pgh.pa.us
Whole thread Raw
In response to Any way to have CREATEUSER privs without having all privs?  ("ezra epstein" <ee_newsgroup_post@prajnait.com>)
List pgsql-general
"ezra epstein" <ee_newsgroup_post@prajnait.com> writes:
> Basically I want a login user that can then set session auth... to any other
> user but otherwise has no privs.

You have not thought this through.

If user X can become any other user Y, then he can do anything that is
doable within the system.  Pretending that he is not superuser is
pointless.

            regards, tom lane

pgsql-general by date:

Previous
From: A E
Date:
Subject: Functions Returning Record Datatype
Next
From: "Chris Travers"
Date:
Subject: Re: why the need for is null?