Roles Wizard (PostgreSQL)

From DBArtisan
Jump to: navigation, search

Go Up to PostgreSQL Object Wizards

This wizard lets you build and submit a simple CREATE ROLE statement, defining a new database role.

To create a new role using a wizard:

  1. Open a creation wizard for a role. For details, see Opening an Object Wizard.
  2. Use the following topics as a guide to setting properties and performing tasks as you pass through the wizard panels:
  3. Finally, use the Execute button to create the object.

Roles (PostgreSQL) - Properties

When creating or editing a role, this tab/panel lets you work with the following settings:

Setting Availability and Description

Name

Lets you provide the name of the new role.

Password and Encrypted Password

These items control how the password is created for the new role. The Password control lets you provide a password for the new role. If Encrypted Password is selected, an ENCRYPTED PASSWORD... parameter is generated. Otherwise, an UNENCRYPTED PASSWORD... parameter is generated.

Account Expires

Selecting this control enables a calendar widget that lets you select a value for a VALID UNTIL parameter in the generated DDL.

Connection Limit

Lets you provide the value for a CONNECTION LIMIT parameter, setting a limit on the number of concurrent connections the new role can make.

Login

This control determines whether a role is allowed to log in. If Login is selected, a LOGIN parameter is included in the DDL. Otherwise, a NOLOGIN parameter is included in the DDL.

Superuser

This control determines whether a role can override all access restrictions within the database. If Superuser is selected, a SUPERUSER parameter is included in the DDL. Otherwise, a NOSUPERUSER parameter is included in the DDL.

Create Database and Create Roles

These controls determine whether a role can create databases or roles, respectively. When selected, CREATEDB or CREATEROLE parameters are added to the generated DDL. Otherwise, NOCREATEDB or NOCREATEDB parameter are included in the DDL.

Update Catalog

Only available if Superuser is selected. By default, this option is selected, dictating that this role can update system catalogs directly. If deslected, an UPDATE pg_catalog.pg_authid SET rolcatupdate=false WHERE rolname=... statement is generated and appended to the CREATE ROLE statement, explicitly disabling catalog update for the new role.

Replication

This setting determine whether a role can initiate streaming replication or can control backup mode. If Replication is selected, a REPLICATION parameter is included in the DDL. Otherwise, a NOREPLICATION parameter is included in the DDL.

Roles (PostgreSQL) - Membership

When creating or editing a role, this tab/panel lets you append one or more GRANT statements to the generated CREATE ROLE statement, granting membership in the role to other roles. For each GRANT statement to be generated, select a role from the Groups list and click Join to assign membership in the selected role to the role being created.