How it works…

If you didn't catch it before, PostgreSQL allows transactional DDL in most places, so either both of the REVOKE and GRANT commands in the preceding section work or neither works. This means that the fred user never loses the ability to connect to the database. Note that CREATE DATABASE cannot be performed as part of a transaction, though nothing serious happens as a result.