Re: CREATE ROLE bug?
От
David G. Johnston
Тема
Re: CREATE ROLE bug?
Дата
Msg-id
CAKFQuwag6RzTrpdkmzMj9C_nb25EAv8cURARvx+v3NyY=N8dEw@mail.gmail.com
Ответ на
Re: CREATE ROLE bug? (Bruce Momjian)
Список
Дерево обсуждения
CREATE ROLE bug? Bruce Momjian <bruce@momjian.us>
Re: CREATE ROLE bug? Robert Haas <robertmhaas@gmail.com>
Re: CREATE ROLE bug? Bruce Momjian <bruce@momjian.us>
Re: CREATE ROLE bug? Robert Haas <robertmhaas@gmail.com>
Re: CREATE ROLE bug? "David G. Johnston" <david.g.johnston@gmail.com>
Re: CREATE ROLE bug? Bruce Momjian <bruce@momjian.us>
Re: CREATE ROLE bug? "David G. Johnston" <david.g.johnston@gmail.com>
Re: CREATE ROLE bug? Bruce Momjian <bruce@momjian.us>
On Wed, Jan 25, 2023 at 7:35 AM Bruce Momjian <bruce@momjian.us> wrote:
So, how would someone with CREATEROLE permission add people to their own
role, without superuser permission? Are we adding any security by
preventing this?
As an encouraged design choice you wouldn't. You'd create a new group and add both yourself and the new role to it - then grant it the desired permissions.
A CREATEROLE role should probably be a user (LOGIN) role and user roles should not have members.
David J.
В списке pgsql-hackers по дате отправления
