Re: BUG #15371: a user who not a member of pg_read_server_files rolecan create a new user into pg_read_server_files
От
David G. Johnston
Тема
Re: BUG #15371: a user who not a member of pg_read_server_files rolecan create a new user into pg_read_server_files
Дата
Msg-id
CAKFQuwYyGB11h7oEUp8pbgnCGzWpaa9Z+NEKZ5xk_4qrCMdyyQ@mail.gmail.com
Ответ на
BUG #15371: a user who not a member of pg_read_server_files role cancreate a new user into pg_read_server_files (PG Bug reporting form)
Список
Дерево обсуждения
BUG #15371: a user who not a member of pg_read_server_files role cancreate a new user into pg_read_server_files PG Bug reporting form <noreply@postgresql.org>
Re: BUG #15371: a user who not a member of pg_read_server_files rolecan create a new user into pg_read_server_files "David G. Johnston" <david.g.johnston@gmail.com>
Re: BUG #15371: a user who not a member of pg_read_server_files rolecan create a new user into pg_read_server_files "David G. Johnston" <david.g.johnston@gmail.com>
On Saturday, September 8, 2018, PG Bug reporting form <noreply@postgresql.org> wrote:
1,execute "CREATE USER mytestuser WITH PASSWORD '12345678' CREATEDB
CREATEROLE;" use a supper user;
So, reading the create role docs this seems to be working as designed.
“ Be careful with the
CREATEROLE privilege. There is no concept of inheritance for the privileges of a CREATEROLE-role. That means that even if a role does not have a certain privilege but is allowed to create other roles, it can easily create another role with different privileges than its own (except for creating roles with superuser privileges)“David J.
В списке pgsql-bugs по дате отправления
От: David G. Johnston
Дата:
