Re: report bug - Mailing list pgsql-bugs

From David G. Johnston
Subject Re: report bug
Date
Msg-id CAKFQuwbeAyA3N6OvQ4rzbka6NLpmAHbaGdzEXEr8v+KkRmeWYw@mail.gmail.com
Whole thread Raw
In response to report bug  ("断桥烟雨三两月" <1310659646@qq.com>)
Responses Re: report bug
List pgsql-bugs

So, why a role with NOCREATEDB can create a role who can create DB?

Cannot answer why but given it is documented as working this way this isn’t a bug.

“ Be careful with the CREATEROLE privilege. There is no concept of inheritance for the privileges of a CREATEROLE-role. That means that even if a role does not have a certain privilege but is allowed to create other roles, it can easily create another role with different privileges than its own (except for creating roles with superuser privileges)”


David J.

pgsql-bugs by date:

Previous
From: "断桥烟雨三两月"
Date:
Subject: report bug
Next
From: Tom Lane
Date:
Subject: Re: report bug