diff options
Diffstat (limited to 'doc/src/sgml/user-manag.sgml')
| -rw-r--r-- | doc/src/sgml/user-manag.sgml | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/doc/src/sgml/user-manag.sgml b/doc/src/sgml/user-manag.sgml index 08b3fb7dc4..2830aec49c 100644 --- a/doc/src/sgml/user-manag.sgml +++ b/doc/src/sgml/user-manag.sgml @@ -175,7 +175,11 @@ CREATE USER <replaceable>name</replaceable>; to do most of your work as a role that is not a superuser. To create a new database superuser, use <literal>CREATE ROLE <replaceable>name</replaceable> SUPERUSER</literal>. You must do - this as a role that is already a superuser. + this as a role that is already a superuser. Creating a superuser + will by default also grant permissions to initiate streaming + replication. For increased security this can be disallowed using + <literal>CREATE ROLE <replaceable>name</replaceable> SUPERUSER + NOREPLICATION</literal>. </para> </listitem> </varlistentry> @@ -214,9 +218,8 @@ CREATE USER <replaceable>name</replaceable>; <listitem> <para> A role must explicitly be given permission to initiate streaming - replication (superusers do not bypass this check). A role used - for streaming replication must always have <literal>LOGIN</> - permission as well. To create such a role, use + replication. A role used for streaming replication must always + have <literal>LOGIN</> permission as well. To create such a role, use <literal>CREATE ROLE <replaceable>name</replaceable> REPLICATION LOGIN</literal>. </para> |