diff options
author | Robert Haas <rhaas@postgresql.org> | 2023-01-03 14:50:40 -0500 |
---|---|---|
committer | Robert Haas <rhaas@postgresql.org> | 2023-01-03 15:03:03 -0500 |
commit | 5dac191edf1816860993e5f43b817eafcece1166 (patch) | |
tree | 8425f233e896c7f516f78c7830bf8937d806cd19 /src/backend/executor/nodeModifyTable.c | |
parent | 1c89549ca48d04195bfc774534a54cf84b797e8b (diff) | |
download | postgresql-5dac191edf1816860993e5f43b817eafcece1166.tar.gz postgresql-5dac191edf1816860993e5f43b817eafcece1166.zip |
Improve documentation of the CREATEROLE attibute.
In user-manag.sgml, document precisely what privileges are conveyed
by CREATEROLE. Make particular note of the fact that it allows
changing passwords and granting access to high-privilege roles.
Also remove the suggestion of using a user with CREATEROLE and
CREATEDB instead of a superuser, as there is no real security
advantage to this approach.
Elsewhere in the documentation, adjust text that suggests that
<literal>CREATEROLE</literal> only allows for role creation, and
refer to the documentation in user-manag.sgml as appropriate.
Patch by me, reviewed by Álvaro Herrera
Discussion: http://postgr.es/m/CA+TgmoZBsPL8nPhvYecx7iGo5qpDRqa9k_AcaW1SbOjugAY1Ag@mail.gmail.com
Diffstat (limited to 'src/backend/executor/nodeModifyTable.c')
0 files changed, 0 insertions, 0 deletions