Re: Creating extensions for non-superusers

2018-08-13 Thread Robert Haas
On Fri, Aug 10, 2018 at 11:11 AM, Stephen Frost wrote: > For my 2c, I'd like something along these lines when it comes to a > capability but it's just not that simple. It seems pretty simple to me. We have a bunch of other predefined roles that allow otherwise-superuser-only operations to be del

Re: Creating extensions for non-superusers

2018-08-10 Thread Stephen Frost
Greetings, * Alexandra Ryzhevich (aryzhev...@google.com) wrote: > In an environment where we control the host system and all installed > extensions, we need to allow postgresql non-superuser to install all of > them, without opening gaps that will let this user gain superuser > privileges. We have

Creating extensions for non-superusers

2018-08-10 Thread Alexandra Ryzhevich
Hello! In an environment where we control the host system and all installed extensions, we need to allow postgresql non-superuser to install all of them, without opening gaps that will let this user gain superuser privileges. We have a sample solution to add a new default role pg_create_extension