Re: Revoke "drop database" even for superusers? - Mailing list pgsql-general

Thanks, this is exactly what I was looking for.
One more question: changing this attribute will present is no side effects?

Thanks,

Edson Carlos Ericksson Richter SimKorp Informática Ltda
Fone:	(51) 3366-7964
Celular:	(51)9318-9766/(51) 8585-0796

Em 09/11/2012 09:42, Albe Laurenz escreveu:

Edson Richter wrote:

I've a bunch of databases that cannot be dropped in any case.

I was wondering if it is possible to revoke "drop database" permission

for all users, in order that

even superuser, if he wishes to drop a database, he will need first to

"grant drop database" first.

I know there is already a safety that does not allow dropping

databases in use - I just want to make

even harder.

You cannot play it over permissions, but what about the following trick:

postgres=# CREATE DATABASE persist;
CREATE DATABASE
postgres=# UPDATE pg_database SET datistemplate=TRUE WHERE
datname='persist';
UPDATE 1
postgres=# DROP DATABASE persist;
ERROR:  cannot drop a template database

Yours,
Laurenz Albe