Re: [GENERAL] Defining Role Privileges

2012-02-13 Thread Jasen Betts
On 2012-02-08, Carlos Mennens wrote: > ALTER ROLE tom ENCRYPTED PASSWORD 'md5081bea17b5503506d29531af33cc6f4e'; > > \password tom > > Is there a downside to using the \password psql command? Is it also > encrypted like the statement above? How do you create roles and do you > do it manually or ha

Re: [GENERAL] Defining Role Privileges

2012-02-08 Thread Tom Lane
Carlos Mennens writes: > My question is do I need to specify CREATEDB & CREATEROLE if I'm > already granting the SUPERUSER privilege? No, not really. The point of those options is to grant privileges to roles that aren't superuser. > Also when I generate a new role, is there any difference betw

[GENERAL] Defining Role Privileges

2012-02-08 Thread Carlos Mennens
I'm wondering about my CREATE ROLE statements for PostgreSQL. I guess I don't know if there's an official answer but I feel like I'm entering a lot of redundant privileges to a role for example: CREATE ROLE tom NOINHERIT LOGIN SUPERUSER CREATEDB CREATEROLE REPLICATION; CREATE ROLE My question is