Clark C. Evans wrote:
>>> I'd really love the ability to grant a *user*
>>> role-based privileges database by database.
>>
>> The only cluster-wide role permissions are the options
>> SUPERUSER, CREATEDB, CREATEROLE, INHERIT,
>> LOGIN and REPLICATION.
>
> Incorrect; role-to-role membership (different from INHERIT)
> is also a cluster-wide role permission. Hence, I have no
> way to assign a user "auditor" role in one database, and not
> grant that same user "auditor" role in another database.
Now I understand what you want.
Maybe the db_user_namespace parameter can help:
http://www.postgresql.org/docs/9.2/static/runtime-config-connection.html#GUC-DB-USER-NAMESPACE
Yours,
Laurenz Albe