a group of superuser

Started by sferriolabout 22 years ago3 messagesgeneral
Jump to latest
#1sferriol
sylvain.ferriol@imag.fr

hello
i'm creating a database with different groups of users.
but i have one group which is the administrators of the system.
i would like to enable all members of this group to have the rights to
create another users.

how can i do that with a GROUP in postgres?

thanks
sylvain

#2Peter Eisentraut
peter_e@gmx.net
In reply to: sferriol (#1)
Re: a group of superuser

sferriol wrote:

i'm creating a database with different groups of users.
but i have one group which is the administrators of the system.
i would like to enable all members of this group to have the rights
to create another users.

how can i do that with a GROUP in postgres?

It's not possible.

#3Richard Huxton
dev@archonet.com
In reply to: Peter Eisentraut (#2)
Re: a group of superuser

On Tuesday 09 March 2004 15:02, Peter Eisentraut wrote:

sferriol wrote:

i'm creating a database with different groups of users.
but i have one group which is the administrators of the system.
i would like to enable all members of this group to have the rights
to create another users.

how can i do that with a GROUP in postgres?

It's not possible.

However, you probably could:
1. write a function (as a superuser) that creates users
2. let it run with the permissions of the creator
3. grant access to your target group.

You'll want to read up on the SECURITY DEFINER attributes of CREATE FUNCTION
and probably the EXECUTE command of plpgsql.

Note - I haven't tried this myself, so if it does work it would be helpful to
let the list know.
--
Richard Huxton
Archonet Ltd