On 5/30/2017 2:06 PM, chiru r wrote:
'user' is a synonym for 'role' with login permission. CREATE USER fred; is exactly the same as... CREATE ROLE fred WITH LOGIN; when you SET ROLE rolename; its virtually the same as logging in as rolename Why it is not allowed to GRANT SUPERUSER/CREATEDB etc roles Directly to user (using GRANT ,not ALTER USER) ?
GRANT is used to grant object related permissions or to grant
role membership, its not a 'role' nor do roles inherit special
attributes like SUPERUSER, CREATEDB.
-- john r pierce, recycling bits in santa cruz |