Re: superuser unable to modify settings of a system table - Mailing list pgsql-bugs

From Tom Lane
Subject Re: superuser unable to modify settings of a system table
Date
Msg-id 23774.1275686014@sss.pgh.pa.us
Whole thread Raw
In response to Re: superuser unable to modify settings of a system table  (Robert Haas <robertmhaas@gmail.com>)
Responses Re: superuser unable to modify settings of a system table  (Robert Haas <robertmhaas@gmail.com>)
Re: superuser unable to modify settings of a system table  (Bruce Momjian <bruce@momjian.us>)
List pgsql-bugs
Robert Haas <robertmhaas@gmail.com> writes:
>  Is there really a use case for users fiddling with pg_proc, pg_class,
> etc. directly?

There's a use case for *superusers* to fiddle with them, yes.
(Superusers are presumed to be adults.)  I think I recommend a quick
UPDATE on some catalog at least once a month on the lists.

You might care to consider the fact that no modern Unix system prevents
root from doing rm -rf /, even though that's "obviously" disastrous.
Yet (stretching the analogy all out of shape) there's no convenient user
tool for rearranging the contents of all the inodes on a filesystem.

> At any rate, I'd be happy to drop that part of the proposal.  It would
> be a step forward just to permit (even without
> allow_system_table_mods) those changes which don't alter the structure
> of the catalog.  For ALTER TABLE, the SET STATISTICS, (RE)SET
> (attribute_option), SET STORAGE, CLUSTER ON, SET WITHOUT CLUSTER, and
> (RE)SET (reloptions) forms are all things that fall into this
> category, I believe.

It would be far less work to just drop allow_system_table_mods to SUSET.
And we wouldn't get questions about which forms of ALTER TABLE require
it.

            regards, tom lane

pgsql-bugs by date:

Previous
From: Robert Haas
Date:
Subject: Re: superuser unable to modify settings of a system table
Next
From: Alvaro Herrera
Date:
Subject: Re: BUG #5488: pg_dump does not quote column names -> pg_restore may fail when upgrading