Thread: disallow SET WORK_MEM

Hi @list,

is it possible to disallow "set work_mem to ..." for regular
(non-superuser) users?

Background: a shared database server with multiple users.



Andreas
--
Really, I'm not out to destroy Microsoft. That will just be a completely
unintentional side effect.                              (Linus Torvalds)
"If I was god, I would recompile penguin with --enable-fly."   (unknown)
Kaufbach, Saxony, Germany, Europe.              N 51.05082°, E 13.56889°

Andreas Kretschmer wrote:
> Hi @list,
>
> is it possible to disallow "set work_mem to ..." for regular
> (non-superuser) users?
>
> Background: a shared database server with multiple users.

We have discussed it and might offer that ability some day, but
currently there is no way to do that.  There are so many ways to mess
things up with a bad query that we are unclear if restricting work_mem
is really helpful.


--
  Bruce Momjian  <bruce@momjian.us>        http://momjian.us
  EnterpriseDB                             http://enterprisedb.com

  + It's impossible for everything to be true. +

Bruce Momjian <bruce@momjian.us> writes:
> Andreas Kretschmer wrote:
>> is it possible to disallow "set work_mem to ..." for regular
>> (non-superuser) users?

> We have discussed it and might offer that ability some day, but
> currently there is no way to do that.  There are so many ways to mess
> things up with a bad query that we are unclear if restricting work_mem
> is really helpful.

Preventing people from setting an appropriate work_mem might well create
more denial-of-service problems than it prevents.

            regards, tom lane