RAL"
>CREATEROLE</TT
>-role. That
   means that even if a role does not have a certain privilege but is allowed
   to create other roles, it can easily create another role with different
   privileges than its own (except for creating roles with superuser
   privileges). For example, if the role <SPAN
CLASS="QUOTE"
>"user"</SPAN
> has the
   <TT
CLASS="LITERAL"
>CREATEROLE</TT
> privilege but not the <TT
CLASS="LITERAL"
>CREATEDB</TT
> privilege,
   nonetheless it can create a new role with the <TT
CLASS="L