On Mon, Sep 12, 2016 at 7:55 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> Kevin Grittner <kgrittn@gmail.com> writes:
>> But that gives incorrect results for the case I asked about earlier
>> on the thread, while the query I pushed gives correct results:
>
> AFAICS, my query gives correct results for that case. bob is permitted
> to copy fred's databases db1 and postgres, or would be if he had createdb
> privileges. The query you committed is flat wrong, because it doesn't
> account for database ownership being granted via role membership.
Ah, there was a flaw in my testing script. It appeared from my
(flawed) testing that the inherited ownership wasn't enough to
allow use as a template. With the script fixed I see that it does.
Sorry for the noise. Will fix.
--
Kevin Grittner
EDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company