Re: Create DB privilege is not inherited - Mailing list pgsql-general

From David G. Johnston
Subject Re: Create DB privilege is not inherited
Date
Msg-id CAKFQuwbJOYq6hOE-MF9K_2-0XZWK1XA2UpNHt2_SWQS=kVk5zQ@mail.gmail.com
Whole thread Raw
In response to Create DB privilege is not inherited  (Ben Hancock <lists@benghancock.com>)
Responses Re: Create DB privilege is not inherited  (Ben Hancock <lists@benghancock.com>)
List pgsql-general


On Thursday, July 27, 2023, Ben Hancock <lists@benghancock.com> wrote:

Should the CREATEDB privilege be inherited when granting the 'admins'
role to a user, or is another step required?

Or (quite possibly) have I misunderstood something else?

Docs say:


The INHERIT attribute governs inheritance of grantable privileges (that is, access privileges for database objects and role memberships). It does not apply to the special role attributes set by CREATE ROLE and ALTER ROLE. For example, being a member of a role with CREATEDB privilege does not immediately grant the ability to create databases, even if INHERIT is set; it would be necessary to become that role via SET ROLE before creating a database."

David J.

pgsql-general by date:

Previous
From: Ben Hancock
Date:
Subject: Create DB privilege is not inherited
Next
From: Ben Hancock
Date:
Subject: Re: Create DB privilege is not inherited