I'm working on a project which needs to satisfy some legal requirements for password strength. But any postgresql user can do; alter role [session_user] password 'foo'; Is there any way to disallow self changing of password by ordinary users? Or force password strength in any other way? Regards Tometzky -- ...although Eating Honey was a very good thing to do, there was a moment just before you began to eat it which was better than when you were... Winnie the Pooh