[PostGIS] #5982: CREATE EXTENSION POSTGIS must be done as SUPERUSER

PostGIS trac at osgeo.org
Thu Sep 4 13:41:19 PDT 2025


#5982: CREATE EXTENSION POSTGIS must be done as SUPERUSER
-------------------------+---------------------------
 Reporter:  bceccarelli  |      Owner:  pramsey
     Type:  defect       |     Status:  new
 Priority:  medium       |  Milestone:  PostGIS 3.6.1
Component:  postgis      |    Version:  3.5.x
 Keywords:               |
-------------------------+---------------------------
 In a database that is not owned by a SUPERUSER.  PostGIS creates objects
 in the public schema, but all those objects are owned by the SUPERUSER,
 not the database owner.  So now I have "illegal alien" PostGIS objects in
 my public schema.   Not good.   Is there a reason for the need for
 superuser to install PostGIS?

 I work around around this problem by temporarily giving my database owner
 "SUPERUSER" privilege.   That installing PostGIS.   Then demoting the
 database owner.

 But I cannot work around this on Aurora Postgres in AWS.  In Aurora, the
 only superuser is "rdsadmin" and only AWS employees can connect with that
 user.   In AWS, there is a pseudo "master" user but I cannot elevate any
 other role's privileges.

 Can I help?

 I have written a lot of Postgres C code in the past.
-- 
Ticket URL: <https://trac.osgeo.org/postgis/ticket/5982>
PostGIS <http://trac.osgeo.org/postgis/>
The PostGIS Trac is used for bug, enhancement & task tracking, a user and developer wiki, and a view into the subversion code repository of PostGIS project.


More information about the postgis-tickets mailing list