Joachim Wieland <joe@xxxxxxxxxxx> writes:
> So in effect, if you grant the CREATEROLE privilege, you automatically grant
> CREATEDB as well...
Not to mention a whole lot of other privileges. CREATEROLE is pretty
nearly superuser from a what-can-you-do point of view. It only disables
the ability to actively break the database system (eg by directly
modifying system catalogs).
regards, tom lane
---------------------------(end of broadcast)---------------------------
TIP 3: Have you checked our extensive FAQ?
http://www.postgresql.org/docs/faq
