Thread: General Feedback

General Feedback

From
PG Doc comments form
Date:
The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/15/sql-createschema.html
Description:

"To create a schema, the invoking user must have the CREATE privilege for
the current database. (Of course, superusers bypass this check.)" - maybe
you can show how to check if the user has the CREATE privilege? Or is this
omitted on purpose so readers will take their own initiative to find that
out themselves :-)

Re: General Feedback

From
"David G. Johnston"
Date:
On Mon, Aug 28, 2023 at 7:33 AM PG Doc comments form <noreply@postgresql.org> wrote:
The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/15/sql-createschema.html
Description:

"To create a schema, the invoking user must have the CREATE privilege for
the current database. (Of course, superusers bypass this check.)" - maybe
you can show how to check if the user has the CREATE privilege? Or is this
omitted on purpose so readers will take their own initiative to find that
out themselves :-)

In the interest of brevity it is assumed the reader is familiar with the definitional chapter regarding privileges and can use the knowledge gained there to perform such database inspection.


David J.

Re: General Feedback

From
Edwin UY
Date:

On Tue, Aug 29, 2023 at 2:38 AM David G. Johnston <david.g.johnston@gmail.com> wrote:
On Mon, Aug 28, 2023 at 7:33 AM PG Doc comments form <noreply@postgresql.org> wrote:
The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/15/sql-createschema.html
Description:

"To create a schema, the invoking user must have the CREATE privilege for
the current database. (Of course, superusers bypass this check.)" - maybe
you can show how to check if the user has the CREATE privilege? Or is this
omitted on purpose so readers will take their own initiative to find that
out themselves :-)

In the interest of brevity it is assumed the reader is familiar with the definitional chapter regarding privileges and can use the knowledge gained there to perform such database inspection.


David J.


Thanks for the reply. I assume that was the case. 
I thought it has to do with specific CREATE privilege. 
The user in question has the Create role only when I did a \du+. 
I thought that would not allow him to do a CREATE SCHEMA but it did. So I am guessing so long as the user has the CREATE, it is allowed to do the CREATE SCHEMA.