+
+
+
+Restrict the privileges of CREATEROLE and its ability to modify other roles (Robert Haas)
+
+
+Previously roles with CREATEROLE privileges could change many aspects of any non-superuser role. Such changes, including adding members, now require the role requesting the change to have ADMIN OPTION
+permission. For example, they can now change the CREATEDB, REPLICATION, and BYPASSRLS properties only if they also have those permissions.
+
+
+
-
-
-Restrict the privileges of CREATEROLE roles (Robert Haas)
-
-
-Previously roles with CREATEROLE privileges could change many aspects of any non-superuser role. Such changes, including adding members, now require the role requesting the change to have ADMIN OPTION
-permission.
-
-
-
-
-
-
-Improve logic of CREATEROLE roles ability to control other roles (Robert Haas)
-
-
-For example, they can change the CREATEDB, REPLICATION, and BYPASSRLS properties only if they also have those permissions.
-
-
-