I have problem with permission, I need to use a user no SUPERUSER.
I use commands:
CREATE ROLE $USER LOGIN;
ALTER user $USER noCREATEDB NOCREATEROLE noCREATEUSER NOINHERIT;
ALTER USER $USER with password 'XX';
REVOKE create on SCHEMA public from public;
revoke all on schema PUBLIC FROM $USER;
With these commands MY user $USER don't have permission to create table and another thing. But I need that $USER can't have permission to change your password with:
psql -d $BD -h $HOST -U $USER
# ALTER $USER maluco with password 'YYY';
After user $USER execute this ALTER, it get change PASSWORD. Could I block command ALTER password to user $USER?