| From: | Joe Conway <mail(at)joeconway(dot)com> |
|---|---|
| To: | Gabriele Bartolini <gabriele(dot)bartolini(at)enterprisedb(dot)com>, pgsql-hackers(at)postgresql(dot)org |
| Subject: | Re: Possibility to disable `ALTER SYSTEM` |
| Date: | 2023-09-07 19:57:22 |
| Message-ID: | 322cdf29-23b9-90c0-83a0-f4aec182f318@joeconway.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
On 9/7/23 15:51, Gabriele Bartolini wrote:
> I would like to propose a patch that allows administrators to disable
> `ALTER SYSTEM` via either a runt-time option to pass to the Postgres
> server process at startup (e.g. `--disable-alter-system=true`, false by
> default) or a new GUC (or even both), without changing the current
> default method of the server.
Without trying to debate the particulars, a huge +1 for the concept of
allowing ALTER SYSTEM to be disabled. FWIW I would vote the same for
control over COPY PROGRAM.
Not coincidentally both concepts were built into set_user:
https://github.com/pgaudit/set_user
--
Joe Conway
PostgreSQL Contributors Team
RDS Open Source Databases
Amazon Web Services: https://aws.amazon.com
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Gabriele Bartolini | 2023-09-07 20:03:16 | Re: Possibility to disable `ALTER SYSTEM` |
| Previous Message | Gabriele Bartolini | 2023-09-07 19:51:14 | Possibility to disable `ALTER SYSTEM` |