Re: [GENERAL] permission to create user

2006-07-18 Thread Tom Lane
Rafal Pietrak <[EMAIL PROTECTED]> writes: > 1) is the discrepancy by design (why?) or Yes. I think we were mostly concerned about superuserness being too dangerous to inherit. regards, tom lane ---(end of broadcast)--- TIP

Re: [GENERAL] permission to create user

2006-07-18 Thread Rafal Pietrak
Hi, I've been trying to do that same thing, and it works. Still, one point in the process is not quite clear to me. When I have: CREATE GROUP masters; ALTER ROLE masters CREATEUSER; CREATE USER user_one IN GROUP MASTERS; CREATE TABLE test1 (stamp timestamp, thing

Re: [GENERAL] permission to create user

2006-07-18 Thread Timothy Smith
Rafal Pietrak wrote: On Mon, 2006-07-17 at 07:54 -0400, John DeSoi wrote: On Jul 17, 2006, at 2:56 AM, Timothy Smith wrote: is it possible to give a non super user the ability to create another user of a different group? i'm looking for a way to assign a special group of admin's just

Re: [GENERAL] permission to create user

2006-07-18 Thread Rafal Pietrak
On Tue, 2006-07-18 at 07:31 -0600, Michael Fuhr wrote: > On Tue, Jul 18, 2006 at 01:45:01PM +0200, Rafal Pietrak wrote: > > Any one knows, why do I have to explicitly SET ROLE, when I try to > > exercise the group priviledge of role creation, while I don't need that > > when accessing tables? Is th

Re: [GENERAL] permission to create user

2006-07-18 Thread Michael Fuhr
On Tue, Jul 18, 2006 at 01:45:01PM +0200, Rafal Pietrak wrote: > Any one knows, why do I have to explicitly SET ROLE, when I try to > exercise the group priviledge of role creation, while I don't need that > when accessing tables? Is this a feature, or a bug? http://www.postgresql.org/docs/8.1/int

Re: [GENERAL] permission to create user

2006-07-18 Thread Rafal Pietrak
On Mon, 2006-07-17 at 07:54 -0400, John DeSoi wrote: > On Jul 17, 2006, at 2:56 AM, Timothy Smith wrote: > > > is it possible to give a non super user the ability to create > > another user of a different group? > > i'm looking for a way to assign a special group of admin's just > > enough rig

Re: [GENERAL] permission to create user

2006-07-17 Thread Michael Fuhr
On Mon, Jul 17, 2006 at 07:54:08AM -0400, John DeSoi wrote: > On Jul 17, 2006, at 2:56 AM, Timothy Smith wrote: > >is it possible to give a non super user the ability to create > >another user of a different group? > >i'm looking for a way to assign a special group of admin's just > >enough rig

Re: [GENERAL] permission to create user

2006-07-17 Thread John DeSoi
On Jul 17, 2006, at 2:56 AM, Timothy Smith wrote: is it possible to give a non super user the ability to create another user of a different group? i'm looking for a way to assign a special group of admin's just enough rights to create other lowbie users without letting them bypass all othe

[GENERAL] permission to create user

2006-07-17 Thread Timothy Smith
is it possible to give a non super user the ability to create another user of a different group? i'm looking for a way to assign a special group of admin's just enough rights to create other lowbie users without letting them bypass all other access restrictions. ---(end