> I think I'd vote for throwing an ERROR. By the time you see the
> WARNING it may be too late. Since this is only for emergencies, the
> user can shut off recovery_connections first if they really need it.
I'm with Robert on this one. If running VFI will cause unrecoverable
failure on the slave, it should be prevented.
If this is only an issue with system tables, then we only need to error
on system tables.
--Josh