On Tue, Jan 28, 2020 at 3:52 PM Tom Lane <t...@sss.pgh.pa.us> wrote: > I continue to think that allowing DB owners to decide this is, if not > fundamentally the wrong thing, at least not a feature that anybody has > asked for in the past. The feature *I* want in this area is for the > superuser to be able to decide who's got install privilege. Making > it a DB-level privilege doesn't serve that goal, more the opposite.
I agree. > Still, if we can compromise by making this part of DB "CREATE" privilege > for the time being, I'm willing to take that compromise. It's certainly > better than failing to get rid of pg_pltemplate. Doesn't that have exactly the issue you describe above? bob=> grant create on database bob to fred; GRANT -- Robert Haas EnterpriseDB: http://www.enterprisedb.com The Enterprise PostgreSQL Company
