tag:blogger.com,1999:blog-20038672.post4708839013573935156..comments2024-03-28T00:58:29.187-04:00Comments on Robert Haas: Surviving Without A Superuser - Part TwoRobert Haashttp://www.blogger.com/profile/08393677427643988650noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-20038672.post-52281782240952814452022-01-28T12:34:31.247-05:002022-01-28T12:34:31.247-05:00I agree.I agree.Robert Haashttps://www.blogger.com/profile/08393677427643988650noreply@blogger.comtag:blogger.com,1999:blog-20038672.post-272627771213512692022-01-19T04:28:00.534-05:002022-01-19T04:28:00.534-05:00Only roles having the superuser attribute can crea...Only roles having the superuser attribute can create other roles with superuser attribute.<br /><br />But roles having the createrole attribute can create other roles having role attributes it doesn't own by itself, eg. createdb.<br /><br />This was never coherent for me. A role should only be able to inherit role attributes it owns by itself. Coherent, flexible and more secure.<br />Markusnoreply@blogger.com