On Thu, 2025-06-12 at 08:19 +0000, PG Doc comments form wrote:
> The following documentation comment has been logged on the website:
>
> Page: https://www.postgresql.org/docs/14/predefined-roles.html
> Description:
>
> Page: https://www.postgresql.org/docs/current/predefined-roles.html
> Wrong statement: "Administrators (including roles that have the CREATEROLE
> privilege) can GRANT these roles to users and/or other roles in their
> environment, providing those users with access to the specified capabilities
> and information."
> Suggested statement: "SUPERUSER or roles granted with the ADMIN option on
> the particular predifined roles can GRANT these roles other roles, providing
> those users with access to the specified capabilities and information."
> Testcase:
> postgres=> create role bob;
> CREATE ROLE
> postgres=> grant pg_checkpoint to bob;
> ERROR: permission denied to grant role "pg_checkpoint"
> DETAIL: Only roles with the ADMIN option on role "pg_checkpoint" may grant
> this role.
> postgres=> grant pg_create_subscription to bob;
> ERROR: permission denied to grant role "pg_create_subscription"
> DETAIL: Only roles with the ADMIN option on role "pg_create_subscription"
> may grant this role.
+1
That looks like a clear oversight.
Yours,
Laurenz Albe
