"Jim C. Nasby" <jnasby@pervasive.com> writes:
> On Fri, Aug 12, 2005 at 08:55:09AM -0500, Bruno Wolff III wrote:
>> For more information take a look at the CREATE ROLE command in the
>> developer docs.
> ISTM that it's a bug to be able to assign permissions that you don't
> yourself have. In this case, if you have CREATEROLE but not SUPERUSER,
> then you should be able to create roles, but not ones that have
> SUPERUSER status. If this isn't how it currently works then there should
> be a big warning under CREATEROLE.
Did you read the docs Bruno pointed you to?
http://developer.postgresql.org/docs/postgres/sql-createrole.html
regards, tom lane