Re: Revoke for a new role

Tom Lane <tgl@xxxxxxxxxxxxx> · Fri, 13 Jun 2008 11:11:42 -0400

"Milen A. Radev" <milen@xxxxxxxxx> writes:
> Rafael Domiciano Ð½Ð°Ð¿Ð¸Ñ?Ð°:
>> I need to create a role (Postgres user) that cannot drop or create table,
>> but can create TEMP tables. This role must do I, U and D normally.

> For a role to be able to create tables (and other objects) it should 
> have "CREATE" privilege on the _schema_ in question.

More specifically, what you're going to need to do is revoke "public"
create access on the public schema, and then selectively grant it to
everyone you want to have it.  There's no notion of "everyone but X
gets this privilege".

			regards, tom lane