Re: security labels on databases are bad for dump & restore - Mailing list pgsql-hackers

From Adam Brightwell
Subject Re: security labels on databases are bad for dump & restore
Date
Msg-id CAKRt6CTNAudkzqw_9sJbyAUWLC94t5SnFatkupGy9+m388QYVw@mail.gmail.com
Whole thread Raw
In response to Re: security labels on databases are bad for dump & restore  (Alvaro Herrera <alvherre@2ndquadrant.com>)
Responses Re: security labels on databases are bad for dump & restore
Re: security labels on databases are bad for dump & restore
Re: security labels on databases are bad for dump & restore
List pgsql-hackers
> I don't think there's any line near pg_dumpall.  That tool seems to
> have grown out of desperation without much actual design.  I think it
> makes more sense to plan around that's the best pg_dump behavior for the
> various use cases.

Ok.

> I like Noah's proposal of having pg_dump --create reproduce all
> database-level state.

Should it be enabled by default?  If so, then wouldn't it make more
sense to call it --no-create and do the opposite?  So, --no-create
would exclude rather than include database-level information?  Would
enabling it by default cause issues with the current expected use of
the tool by end users?

How would this handle related global objects? It seems like this part
could get a little tricky.

Taking it one step further, would a --all option that dumps all
databases make sense as well?  Of course I know that's probably a
considerable undertaking and certainly beyond the current scope.
Though, I thought I'd throw it out there.

Also, I think this would potentially conflict with what Fabrízio is
doing with CURRENT_DATABASE on COMMENT, though, I think it might be a
preferable solution.

https://commitfest.postgresql.org/5/229/

-Adam

--
Adam Brightwell - adam.brightwell@crunchydatasolutions.com
Database Engineer - www.crunchydatasolutions.com



pgsql-hackers by date:

Previous
From: Paul Ramsey
Date:
Subject: Re: [PATCH] postgres_fdw extension support
Next
From: Fabrízio de Royes Mello
Date:
Subject: Re: security labels on databases are bad for dump & restore