The following documentation comment has been logged on the website:
Page: https://www.postgresql.org/docs/14/predefined-roles.html
Description:
Page: https://www.postgresql.org/docs/current/predefined-roles.html
Wrong statement: "Administrators (including roles that have the CREATEROLE
privilege) can GRANT these roles to users and/or other roles in their
environment, providing those users with access to the specified capabilities
and information."
Suggested statement: "SUPERUSER or roles granted with the ADMIN option on
the particular predifined roles can GRANT these roles other roles, providing
those users with access to the specified capabilities and information."
Testcase:
postgres=> create role bob;
CREATE ROLE
postgres=> grant pg_checkpoint to bob;
ERROR: permission denied to grant role "pg_checkpoint"
DETAIL: Only roles with the ADMIN option on role "pg_checkpoint" may grant
this role.
postgres=> grant pg_create_subscription to bob;
ERROR: permission denied to grant role "pg_create_subscription"
DETAIL: Only roles with the ADMIN option on role "pg_create_subscription"
may grant this role.
