"Alexi Gen" <sqlcatz@hotmail.com> writes:
> Since user01 is tagged to dba01 (who has the SUPERUSER option) - should'nt
> user01 also inherit this?
No, he has to actually SET ROLE to the superuser account to make himself
a superuser. SUPERUSER and the other non-GRANTable attributes of a role
don't inherit through mere membership. This is partly an implementation
limitation but I happen to think it's a good idea ... superuserness is a
mighty big hammer to be letting loose accidentally.
regards, tom lane