Re: [GENERAL] Users, groups and inheritance questions

2008-03-28 Thread Glyn Astill
Thanks Tom & ludwig, I understand now. Glyn Astill - Original Message From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> To: pgsql-general@postgresql.org Sent: Friday, 28 March, 2008 3:24:34 PM Subject: Re: [GENERAL] Users, groups and inheritance questions Hello Glyn,

Re: [GENERAL] Users, groups and inheritance questions

2008-03-28 Thread ludwig
Hello Glyn,it's confusing, but You didn't read the manual very carefully! Short excerpt:The INHERIT attribute governs inheritance of grantable privileges (that is, access privileges fordatabase objects and role memberships). It does not apply to the special role attributes set by CREATEROLE and ALT

Re: [GENERAL] Users, groups and inheritance questions

2008-03-28 Thread Tom Lane
Glyn Astill <[EMAIL PROTECTED]> writes: > I thought that if user 'test' was in group 'admins' and I specified INHERIT > then it'd inherit those permissions? No, inheritance of permissions only works for GRANT-able permissions; the special role properties like CREATEDB are outside that scope. I

[GENERAL] Users, groups and inheritance questions

2008-03-28 Thread Glyn Astill
Hi chaps, Apologies in advance if there's something in the docs I've missed here, but I have had a good look around and I can't find a good explanation anywhere. I'm looking at setting up group roles to manage our users, but I can't quite get my head around how the inheritance is supposed to wo