user privileges

Started by Atul Kumaralmost 5 years ago3 messagesgeneral
Jump to latest
#1Atul Kumar
akumar14871@gmail.com

Hi,

My question can be silly but I need to ask that if a user is created
without login privilege then what is the use of below command why
don't postgres prompt error on it

CREATE ROLE nolog_user WITH PASSWORD 'pass1';

as the user is created with login privileges then what is the use such user ?

Where such users having no login privileges can be used ?

Regards.

#2Charles Clavadetscher
clavadetscher@swisspug.org
In reply to: Atul Kumar (#1)
Re: user privileges

Hello

On 2021-06-21 12:40, Atul Kumar wrote:

Hi,

My question can be silly but I need to ask that if a user is created
without login privilege then what is the use of below command why
don't postgres prompt error on it

CREATE ROLE nolog_user WITH PASSWORD 'pass1';

A user without login privilege is usally called a group and is used for
bundling privileges that you can grant granting the role to individual
users. This helps you to keep more order and structure in your DB
privileges.

You may also have a user that can login and for whatever reason must be
restricted access for a certain time.

as the user is created with login privileges then what is the use such
user ?

See above.

Where such users having no login privileges can be used ?

Yes, you use it as a group.

--
Charles Clavadetscher
Spitzackerstrasse 9
CH - 8057 Zürich

https://www.swisspug.org

+------------------------+
| ____ ______ ___ |
| / )/ \/ \ |
| ( / __ _\ ) |
| \ (/ o) ( o) ) |
| \_ (_ ) \ ) _/ |
| \ /\_/ \)/ |
| \/ <//| |\\> |
| _| | |
| \|_/ |
| |
| Swiss PostgreSQL |
| Users Group |
+------------------------+

#3Laurenz Albe
laurenz.albe@cybertec.at
In reply to: Atul Kumar (#1)
Re: user privileges

On Mon, 2021-06-21 at 16:10 +0530, Atul Kumar wrote:

My question can be silly but I need to ask that if a user is created
without login privilege then what is the use of below command why
don't postgres prompt error on it

CREATE ROLE nolog_user WITH PASSWORD 'pass1';

as the user is created with login privileges then what is the use such user ?

The role can be the owner of objects, or it can have members that
inherit privileges.

But setting a password is pointless on a role that cannot login.

Yours,
Laurenz Albe
--
Cybertec | https://www.cybertec-postgresql.com