Re: report bug
| От | David G. Johnston |
|---|---|
| Тема | Re: report bug |
| Дата | |
| Msg-id | CAKFQuwbeAyA3N6OvQ4rzbka6NLpmAHbaGdzEXEr8v+KkRmeWYw@mail.gmail.com обсуждение исходный текст |
| Ответ на | report bug ("断桥烟雨三两月" <1310659646@qq.com>) |
| Ответы |
Re: report bug
|
| Список | pgsql-bugs |
So, why a role with NOCREATEDB can create a role who can create DB?
Cannot answer why but given it is documented as working this way this isn’t a bug.
“ Be careful with the
CREATEROLE privilege. There is no concept of inheritance for the privileges of a CREATEROLE-role. That means that even if a role does not have a certain privilege but is allowed to create other roles, it can easily create another role with different privileges than its own (except for creating roles with superuser privileges)”David J.
В списке pgsql-bugs по дате отправления: