Everything that is a permission (CREATEROLE, etc) when creating a role cannot be inherited. Only the GRANT stuff is inherited and I think only when the WITH .. is given on the GRANT.
I may be wrong on the last part though.
David
On 3/15/07, Alexi Gen <sqlcatz@xxxxxxxxxxx> wrote:
[GENERAL] Role & User - Inheritance?
A ROLE dba01 has been given the option of SUPERSUSER.
A USER user01 is created and tagged to the above ROLE dba01.
When attempting to create a Tablespace (logged in as user01) it generates
the following message:
"permission denied to create tablespace (tblspc01). Must be superuser to
create a tablespace.".
Since user01 is tagged to dba01 (who has the SUPERUSER option) - should'nt
user01 also inherit this? If not - what benefit exists in grouping users
under a Role?
Cheers!
_________________________________________________________________
Spice up your IM conversations. New, colorful and animated emoticons. Get
chatting! http://server1.msn.co.in/SP05/emoticons/
---------------------------(end of broadcast)---------------------------
TIP 6: explain analyze is your friend
