Skip site navigation (1) Skip section navigation (2)

Re: superuser unable to modify settings of a system table

From: Bruce Momjian <bruce(at)momjian(dot)us>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Robert Haas <robertmhaas(at)gmail(dot)com>, Gurjeet Singh <singh(dot)gurjeet(at)gmail(dot)com>, PGSQL Bugs <pgsql-bugs(at)postgresql(dot)org>
Subject: Re: superuser unable to modify settings of a system table
Date: 2011-02-05 03:45:27
Message-ID: 201102050345.p153jR027924@momjian.us (view raw or flat)
Thread:
Lists: pgsql-bugs
Tom Lane wrote:
> Robert Haas <robertmhaas(at)gmail(dot)com> writes:
> >  Is there really a use case for users fiddling with pg_proc, pg_class,
> > etc. directly?
> 
> There's a use case for *superusers* to fiddle with them, yes.
> (Superusers are presumed to be adults.)  I think I recommend a quick
> UPDATE on some catalog at least once a month on the lists.
> 
> You might care to consider the fact that no modern Unix system prevents
> root from doing rm -rf /, even though that's "obviously" disastrous.
> Yet (stretching the analogy all out of shape) there's no convenient user
> tool for rearranging the contents of all the inodes on a filesystem.
> 
> > At any rate, I'd be happy to drop that part of the proposal.  It would
> > be a step forward just to permit (even without
> > allow_system_table_mods) those changes which don't alter the structure
> > of the catalog.  For ALTER TABLE, the SET STATISTICS, (RE)SET
> > (attribute_option), SET STORAGE, CLUSTER ON, SET WITHOUT CLUSTER, and
> > (RE)SET (reloptions) forms are all things that fall into this
> > category, I believe.
> 
> It would be far less work to just drop allow_system_table_mods to SUSET.
> And we wouldn't get questions about which forms of ALTER TABLE require
> it.

Are we going to make the allow_system_table_mods to SUSET change?  Is it
a TODO?

-- 
  Bruce Momjian  <bruce(at)momjian(dot)us>        http://momjian.us
  EnterpriseDB                             http://enterprisedb.com

  + It's impossible for everything to be true. +

In response to

Responses

pgsql-bugs by date

Next:From: iamchriskelleyDate: 2011-02-05 17:54:41
Subject: Re: BUG #5679: pgAdminIII 1.12.0 hangs
Previous:From: Magnus HaganderDate: 2011-02-04 07:43:16
Subject: Re: BUG #5866: Binary replication - default port

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group