> On Aug 1, 2023, at 10:13, William Edwards <wedwards@cyberfusion.nl> wrote:
> This allows all local users connecting over TCP to access all databases, not only the databases that the user is a
memberof as one might expect.
There's really no notion of a user being "a member of" a database in PostgreSQL. Users are global resources, which are
eithergranted access to a particular database, or aren't.
In your example, you explicitly grant access to the databases to the users you are creating.
Since a default installation of PostgreSQL contains only one superuser role, and the `postgres` database, any other
accessrequires specific intervention on the part of someone with a superuser account.