On 12/8/12 9:27 AM, Venus Software Operations wrote:

> Does this mean if a user themself are grants few rights (RightsA) only
> and I login via this user but no role that is all they can do.

Basically, yes. When a user logs in in with no role they get all
privileges granted to them specifically.

However, there is also a pseudo-role named PUBLIC that you can grant
rights to and all users get the privileges granted to PUBLIC. Sometimes
I have granted all "normal" rights that I want all users to have to
PUBLIC and that allows users to connect without specifying any specific
role. Only when they need enhanced rights do they need to connect using
a role which has been granted those enhanced rights.

> Now I grant a role to a user but the rights (RightsB) via this role is
> very different from the default rights the user has, does it mean when
> the user+role is used to login he gets RightsA+RightsB or just RightsB
> because of the role?

The user should get his user rights + role rights when connecting using
the role.