<!--

$Header: /cvsroot/pgsql/doc/src/sgml/ref/createuser.sgml,v 1.23 2002/01/20 22:19:56 petere Exp $

$Header: /cvsroot/pgsql/doc/src/sgml/ref/createuser.sgml,v 1.24 2002/02/1319:32:17 tgl Exp $

PostgreSQL documentation

-->

<term>-d, --createdb</term>

<listitem>

<para>

Allows thenew user to create databases.

Thenew user is allowed to create databases.

</para>

</listitem>

</varlistentry>

<term>-D, --no-createdb</term>

<listitem>

<para>

Forbids thenew user to create databases.

Thenew user is not allowed to create databases.

</para>

</listitem>

</varlistentry>

<term>-a, --adduser</term>

<listitem>

<para>

Allows the new user to create other users.

The new user is allowed to create other users.

(Note: actually, this makes the new user a <firstterm>superuser</>.

The option is poorly named.)

</para>

</listitem>

</varlistentry>

<term>-A, --no-adduser</term>

<listitem>

<para>

Forbids the new user to create other users.

The new user is not allowed to create other users (i.e.,

the new user is a regular user not a superuser).

</para>

</listitem>

</varlistentry>

<para>

<application>createuser</application> creates a

new <productname>PostgreSQL</productname> user.

Only users with <literal>usesuper</literal> set in

the <literal>pg_shadow</literal> table can create

new <productname>PostgreSQL</productname> users.

Only superusers (users with <literal>usesuper</literal> set in

the <literal>pg_shadow</literal> table) can create

new <productname>PostgreSQL</productname> users,

so <application>createuser</application> must be

invoked by someone who is a <productname>PostgreSQL</productname>

superuser.

</para>

<para>

Being a superuser also implies the ability to bypass access permission

checks within the database, so superuser-dom should not be granted lightly.

</para>

<para>

the <productname>PostgreSQL</productname> interactive terminal

<xref linkend="APP-PSQL">. Thus, there is nothing

special about creating users via this or other methods. This means

that the <application>psql</application> must be found by the script and that

a database server is running at the targeted host. Also, any default

settings and environment variables available to <application>psql</application>

and the <application>libpq</application> front-end library do apply.

that the <application>psql</application> application must be found by the

script and that

a database server must be running at the targeted host. Also, any default

settings and environment variables used by <application>psql</application>

and the <application>libpq</application> front-end library will apply.

</para>

</refsect1>