Bill Moran <wmoran@xxxxxxxxxxxxxxxxxxxxxxx> writes: > Given: > CREATE ROLE joe WITH LOGIN; > CREATE ROLE dumpable; > ALTER GROUP dumpable ADD USER joe; > If I have a database called db1 to which the role dumpable has enough > permissions to do a full pg_dump, but he user joe does not, how can > joe do a pg_dump? Is it possible? Uh, given the setup you show it seems like joe should have enough privileges. Can you give a concrete example of it going wrong? regards, tom lane