database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-10-28 11:55:03 +03:00
Code Activity

Appended is a small documentation patch that adds a note to the CREATE

Browse Source 
ROLE page, based on what Tom Lane told me here:

	http://archives.postgresql.org/pgsql-general/2005-11/msg00998.php


Joachim Wieland
This commit is contained in:
Bruce Momjian
2006-03-03 03:06:17 +00:00
parent 69f69808c5
commit 2c620740bd
1 changed files with 14 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
doc/src/sgml/ref/create_role.sgml
View File

@@ -1,5 +1,5 @@
<!-- <!--
$PostgreSQL: pgsql/doc/src/sgml/ref/create_role.sgml,v 1.4 2005/11/03 00:51:43 neilc Exp $ $PostgreSQL: pgsql/doc/src/sgml/ref/create_role.sgml,v 1.4.2.1 2006/03/03 03:06:17 momjian Exp $
PostgreSQL documentation PostgreSQL documentation
--> -->
@@ -344,6 +344,19 @@ where <replaceable class="PARAMETER">option</replaceable> can be:
specified in the SQL standard. specified in the SQL standard.
</para> </para>
<para>
Be careful with the <literal>CREATEROLE</> privilege. There is no concept of
inheritance for the privileges of a <literal>CREATEROLE</>-role. That
means that even if a role does not have a certain privilege but is allowed
to create other roles, it can easily create another role with different
privileges than its own (except for creating roles with superuser
privileges). For example, if the role <quote>user</> has the
<literal>CREATEROLE</> privilege but not the <literal>CREATEDB</> privilege,
nonetheless it can create a new role with the <literal>CREATEDB</>
privilege. Therefore, regard roles that have the <literal>CREATEROLE</>
privilege as almost-superuser-roles.
</para>
<para> <para>
<productname>PostgreSQL</productname> includes a program <xref <productname>PostgreSQL</productname> includes a program <xref
linkend="APP-CREATEUSER" endterm="APP-CREATEUSER-title"> that has linkend="APP-CREATEUSER" endterm="APP-CREATEUSER-title"> that has