Re: [GENERAL] createdb but revoke dropdb

2010-03-03 Thread Ben Eliott
Hi, Thank-you for coming back and your advice. I understand what you mean. However, in order to run the script without additional user input, .pgpass is always needed. One way or another, which ever way i try and twist this, something has to give on security. Perhaps it would be just abo

Re: [GENERAL] createdb but revoke dropdb

2010-03-03 Thread Richard Huxton
On 02/03/10 18:22, Ben Eliott wrote: I have two roles, 'adminuser' with createdb permission, and 'dbuser' a user with CRUD privileges. adminuser is a member of the dbuser role, this seems to allow adminuser to createdb databases for dbuser with: createdb -U adminuser -O dbuser new_database_name

[GENERAL] createdb but revoke dropdb

2010-03-02 Thread Ben Eliott
Hi, In using 8.3. I'm trying to set up programmatic database creation but is there a way that the user creating the databases can be restricting from dropping them? I have two roles, 'adminuser' with createdb permission, and 'dbuser' a user with CRUD privileges. adminuser is a member of