Обсуждение: General Feedback

Поиск
Список
Период
Сортировка

General Feedback

От
PG Doc comments form
Дата:
The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/15/sql-createschema.html
Description:

"To create a schema, the invoking user must have the CREATE privilege for
the current database. (Of course, superusers bypass this check.)" - maybe
you can show how to check if the user has the CREATE privilege? Or is this
omitted on purpose so readers will take their own initiative to find that
out themselves :-)

Re: General Feedback

От
"David G. Johnston"
Дата:
On Mon, Aug 28, 2023 at 7:33 AM PG Doc comments form <noreply@postgresql.org> wrote:
The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/15/sql-createschema.html
Description:

"To create a schema, the invoking user must have the CREATE privilege for
the current database. (Of course, superusers bypass this check.)" - maybe
you can show how to check if the user has the CREATE privilege? Or is this
omitted on purpose so readers will take their own initiative to find that
out themselves :-)

In the interest of brevity it is assumed the reader is familiar with the definitional chapter regarding privileges and can use the knowledge gained there to perform such database inspection.


David J.

Re: General Feedback

От
Edwin UY
Дата:

On Tue, Aug 29, 2023 at 2:38 AM David G. Johnston <david.g.johnston@gmail.com> wrote:
On Mon, Aug 28, 2023 at 7:33 AM PG Doc comments form <noreply@postgresql.org> wrote:
The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/15/sql-createschema.html
Description:

"To create a schema, the invoking user must have the CREATE privilege for
the current database. (Of course, superusers bypass this check.)" - maybe
you can show how to check if the user has the CREATE privilege? Or is this
omitted on purpose so readers will take their own initiative to find that
out themselves :-)

In the interest of brevity it is assumed the reader is familiar with the definitional chapter regarding privileges and can use the knowledge gained there to perform such database inspection.


David J.


Thanks for the reply. I assume that was the case. 
I thought it has to do with specific CREATE privilege. 
The user in question has the Create role only when I did a \du+. 
I thought that would not allow him to do a CREATE SCHEMA but it did. So I am guessing so long as the user has the CREATE, it is allowed to do the CREATE SCHEMA.