From 7b0962038b156c30fbc04b1425a52dec9231620b Mon Sep 17 00:00:00 2001 From: "Karl O. Pinc" Date: Wed, 13 Sep 2023 09:53:37 -0500 Subject: [PATCH] Better superuser docs --- doc/src/architecture/users.m4 | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/doc/src/architecture/users.m4 b/doc/src/architecture/users.m4 index 3347d0b..10cffa6 100644 --- a/doc/src/architecture/users.m4 +++ b/doc/src/architecture/users.m4 @@ -82,9 +82,6 @@ created. Ordinary interactions with the database, data entry, data retrieval, etc., should be done with a non-superuser login. -Membership in the ``sdb_admin_group`` role is what grants superuser -privileges. - .. _developers: Developers @@ -109,3 +106,7 @@ be :ref:`superusers `. and ``CREATEROLE`` privileges. This is enough that there is no need for the actual ``SUPERUSER`` attribute. + + Membership in the ``sdb_admin_group`` role and having the + role attributes ``CREATEROLE`` and ``CREATEDB`` is what + grants a role (login) superuser privileges. -- 2.34.1