File: sql-createuser.html

package info (click to toggle)
mpsql 2.1-2
links: PTS
area: non-free
in suites: potato
size: 3,528 kB
ctags: 4,886
sloc: ansic: 35,184; makefile: 3,761; sh: 44
file content (515 lines) | stat: -rw-r--r-- 8,666 bytes
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML
><HEAD
><TITLE
>   CREATE USER
  </TITLE
><META
NAME="GENERATOR"
CONTENT="Modular DocBook HTML Stylesheet version 1.19"><LINK
REL="HOME"
TITLE="PostgreSQL User's Guide"
HREF="user.html"><LINK
REL="UP"
TITLE="SQL Commands"
HREF="sql-commands.html"><LINK
REL="PREVIOUS"
TITLE="   CREATE TYPE
  "
HREF="sql-createtype.html"><LINK
REL="NEXT"
TITLE="   CREATE VIEW
  "
HREF="sql-createview.html"></HEAD
><BODY
BGCOLOR="#FFFFFF"
TEXT="#000000"
><DIV
CLASS="NAVHEADER"
><TABLE
WIDTH="100%"
BORDER="0"
CELLPADDING="0"
CELLSPACING="0"
><TR
><TH
COLSPAN="3"
ALIGN="center"
>PostgreSQL User's Guide</TH
></TR
><TR
><TD
WIDTH="10%"
ALIGN="left"
VALIGN="bottom"
><A
HREF="sql-createtype.html"
>Prev</A
></TD
><TD
WIDTH="80%"
ALIGN="center"
VALIGN="bottom"
></TD
><TD
WIDTH="10%"
ALIGN="right"
VALIGN="bottom"
><A
HREF="sql-createview.html"
>Next</A
></TD
></TR
></TABLE
><HR
ALIGN="LEFT"
WIDTH="100%"></DIV
><H1
>CREATE USER</H1
><DIV
CLASS="REFNAMEDIV"
><H2
>Name</H2
>   CREATE USER
   &#8212;    Creates account information for a new user
  </DIV
><DIV
CLASS="REFSYNOPSISDIV"
><PRE
CLASS="SYNOPSIS"
>CREATE USER<TT
CLASS="REPLACEABLE"
><I
> username</I
></TT
>
    [ WITH PASSWORD <TT
CLASS="REPLACEABLE"
><I
>password</I
></TT
> ]
    [ CREATEDB   | NOCREATEDB ]
    [ CREATEUSER | NOCREATEUSER ]
    [ IN GROUP     <TT
CLASS="REPLACEABLE"
><I
>groupname</I
></TT
> [, ...] ]
    [ VALID UNTIL  '<TT
CLASS="REPLACEABLE"
><I
>abstime</I
></TT
>' ]
  </PRE
><DIV
CLASS="REFSECT2"
><H3
>    Inputs
   </H3
><P
>       <P
></P
></P><DL
><DT
><SPAN
CLASS="RETURNVALUE"
><TT
CLASS="REPLACEABLE"
><I
>username</I
></TT
></SPAN
></DT
><DD
><P
>	   The name of the user.
	  </P
></DD
><DT
><SPAN
CLASS="RETURNVALUE"
><TT
CLASS="REPLACEABLE"
><I
>password</I
></TT
></SPAN
></DT
><DD
><P
>	   The WITH PASSWORD clause sets the user's password within
	   the "<TT
CLASS="FILENAME"
>pg_shadow</TT
>" table. For this reason,
	   <TT
CLASS="FILENAME"
>"pg_shadow</TT
>" is no
	   longer accessible to the instance of <SPAN
CLASS="PRODUCTNAME"
>Postgres</SPAN
> that the
	   <SPAN
CLASS="PRODUCTNAME"
>Postgres</SPAN
> user's password is initially set to NULL.
	    
	   When a
	   user's password in the "<TT
CLASS="FILENAME"
>pg_shadow</TT
>"
	   table is NULL, user
	   authentication proceeds as it historically has (HBA,
	   PG_PASSWORD, etc). However, if a password is set for a
	   user, a new authentication system supplants any other
	   configured for the <SPAN
CLASS="PRODUCTNAME"
>Postgres</SPAN
> instance, and the password
	   stored in the "<TT
CLASS="FILENAME"
>pg_shadow</TT
>" table is used
	   for authentication.
	   For more details on how this authentication system
	   functions see pg_crypt(3). If the WITH PASSWORD clause is
	   omitted, the user's password is set to the empty
	   string with equates to a NULL value in the authentication
	   system mentioned above.
	  </P
></DD
><DT
><SPAN
CLASS="RETURNVALUE"
> CREATEDB/NOCREATEDB</SPAN
></DT
><DD
><P
> 
	   These clauses define a user's ability to create databases.
	   If CREATEDB is specified, the user being defined will
	   be allowed to create his own databases. Using NOCREATEDB
	   will deny a user the ability to create databases. If this
	   clause is omitted,  NOCREATEDB is used by default.
	  </P
></DD
><DT
><SPAN
CLASS="RETURNVALUE"
>CREATEUSER/NOCREATEUSER</SPAN
></DT
><DD
><P
>	   These clauses determine whether a user will be permitted to
	   create new
	   users in an instance of <SPAN
CLASS="PRODUCTNAME"
>Postgres</SPAN
>.
	   Omitting this clause will set the user's value of this
	   attribute to be NOCREATEUSER.
	  </P
></DD
><DT
><SPAN
CLASS="RETURNVALUE"
><TT
CLASS="REPLACEABLE"
><I
>groupname</I
></TT
></SPAN
></DT
><DD
><P
>	   A name of a group into which to insert the user as a new member.
	  </P
></DD
><DT
><SPAN
CLASS="RETURNVALUE"
><TT
CLASS="REPLACEABLE"
><I
>abstime</I
></TT
></SPAN
></DT
><DD
><P
>	   The VALID UNTIL clause sets an absolute time after which the
	   user's <SPAN
CLASS="PRODUCTNAME"
>Postgres</SPAN
> login is no longer valid. Please note that
	   if a user does not have a password defined in the
	   "<TT
CLASS="FILENAME"
>pg_shadow</TT
>"
	   table, the valid until date will not be checked
	   during user authentication. If this clause is omitted,
	   a NULL value is stored in "<TT
CLASS="FILENAME"
>pg_shadow</TT
>" 
	   for this attribute,
	   and the login will be valid for all time.
	  </P
></DD
></DL
><P>
  </P
></DIV
><DIV
CLASS="REFSECT2"
><H3
>    Outputs
   </H3
><P
>   </P
><P
></P
><DL
><DT
><SPAN
CLASS="RETURNVALUE"
>CREATE USER</SPAN
></DT
><DD
><P
>	   Message returned if the command completes successfully.
	  </P
></DD
><DT
><SPAN
CLASS="RETURNVALUE"
>ERROR:  removeUser: user "<TT
CLASS="REPLACEABLE"
><I
>username</I
></TT
>" does not exist</SPAN
></DT
><DD
><P
>           if "<TT
CLASS="REPLACEABLE"
><I
>username</I
></TT
>" not found.
	  </P
></DD
></DL
></DIV
></DIV
><DIV
CLASS="REFSECT1"
><H2
>   Description
  </H2
><P
>   CREATE USER will add a new user to an instance of 
<SPAN
CLASS="PRODUCTNAME"
>Postgres</SPAN
>.
  </P
><P
>   The new user will be given a <TT
CLASS="FILENAME"
>usesysid</TT
> of:
   '<B
CLASS="COMMAND"
>SELECT MAX(usesysid) + 1 FROM pg_shadow</B
>'.
   This means that 
   <SPAN
CLASS="PRODUCTNAME"
>Postgres</SPAN
> users' <TT
CLASS="FILENAME"
>usesysid</TT
>s will not
   correspond to their operating
   system(OS) user ids. The exception to this rule is
   the '<TT
CLASS="LITERAL"
>postgres</TT
>' user, whose OS user id
   is used as the
   <TT
CLASS="FILENAME"
>usesysid</TT
> during the initdb process. 
   If you still want the
   OS user id and the <TT
CLASS="FILENAME"
>usesysid</TT
> to match
   for any given user,
    use the "createuser" script provided with the <SPAN
CLASS="PRODUCTNAME"
>Postgres</SPAN
>
   distribution.
  </P
><DIV
CLASS="REFSECT2"
><H3
>    Notes
   </H3
><P
>    CREATE USER statement is a <SPAN
CLASS="PRODUCTNAME"
>Postgres</SPAN
> language extension.
   </P
><P
>   Use DROP USER or ALTER USER statements to remove or modify a user
   account.</P
><P
>    Refer to the <TT
CLASS="FILENAME"
>pg_shadow</TT
> table for further information.
   </P
><PRE
CLASS="PROGRAMLISTING"
>   Table    = pg_shadow
   +--------------------------+--------------------------+-------+
   |          Field           |          Type            | Length|
   +--------------------------+--------------------------+-------+
   | usename                  | name                     |    32 |
   | usesysid                 | int4                     |     4 |
   | usecreatedb              | bool                     |     1 |
   | usetrace                 | bool                     |     1 |
   | usesuper                 | bool                     |     1 |
   | usecatupd                | bool                     |     1 |
   | passwd                   | text                     |   var |
   | valuntil                 | abstime                  |     4 |
   +--------------------------+--------------------------+-------+
   </PRE
></DIV
></DIV
><DIV
CLASS="REFSECT1"
><H2
>   Usage
  </H2
><P
>   Create a user with no password:
  </P
><PRE
CLASS="PROGRAMLISTING"
>   CREATE USER jonathan
  </PRE
><P
>   Create a user with a password:
  </P
><PRE
CLASS="PROGRAMLISTING"
>   CREATE USER davide WITH PASSWORD jw8s0F4
  </PRE
><P
>   Create a user with a password, whose account is valid until the end of 2001.
   Note that after one second has ticked in 2002, the account is not
   valid:
  </P
><PRE
CLASS="PROGRAMLISTING"
>   CREATE USER miriam WITH PASSWORD jw8s0F4 VALID UNTIL 'Jan 1 2002'
  </PRE
><P
> 
   Create an account where the user can create databases:
  </P
><PRE
CLASS="PROGRAMLISTING"
>   CREATE USER manuel WITH PASSWORD jw8s0F4 CREATEDB
  </PRE
></DIV
><DIV
CLASS="REFSECT1"
><H2
>   Compatibility
  </H2
><P
>  </P
><DIV
CLASS="REFSECT2"
><H3
>    SQL92
   </H3
><P
>   There is no CREATE USER statement in SQL92.
   </P
></DIV
></DIV
><DIV
CLASS="NAVFOOTER"
><HR
ALIGN="LEFT"
WIDTH="100%"><TABLE
WIDTH="100%"
BORDER="0"
CELLPADDING="0"
CELLSPACING="0"
><TR
><TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
><A
HREF="sql-createtype.html"
>Prev</A
></TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
><A
HREF="user.html"
>Home</A
></TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
><A
HREF="sql-createview.html"
>Next</A
></TD
></TR
><TR
><TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
>CREATE TYPE</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
><A
HREF="sql-commands.html"
>Up</A
></TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
>CREATE VIEW</TD
></TR
></TABLE
></DIV
></BODY
></HTML
>