MIME-Version: 1.0
References: <CAFCRh--VRAHh2D7PsvW1mgRFfx2bqLQH_8asEBTLBn3RDLT7tA@mail.gmail.com>
 <3a6e840a-5c30-4eed-9e5b-474dafc6c29f@aklaver.com> <CAFCRh-83ktPQ+3nWNfSoim1AGW9-j7evaZRyOqyA=_DJ3RUn9w@mail.gmail.com>
In-Reply-To: <CAFCRh-83ktPQ+3nWNfSoim1AGW9-j7evaZRyOqyA=_DJ3RUn9w@mail.gmail.com>
From: Dominique Devienne <ddevienne@gmail.com>
Date: Mon, 25 Aug 2025 19:12:50 +0200
Message-ID: <CAFCRh-9r8M1Y+nW5quojN6NKUUjcSHvUB01JPscGtG1nbL8oSA@mail.gmail.com>
Subject: Re: DISABLE TRIGGER doc wrong?
To: Adrian Klaver <adrian.klaver@aklaver.com>
Cc: pgsql-general@lists.postgresql.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://www.postgresql.org/message-id/CAFCRh-9r8M1Y%2BnW5quojN6NKUUjcSHvUB01JPscGtG1nbL8oSA%40mail.gmail.com>
Precedence: bulk

On Mon, Aug 25, 2025 at 6:33=E2=80=AFPM Dominique Devienne <ddevienne@gmail=
.com> wrote:
> On Mon, Aug 25, 2025 at 6:24=E2=80=AFPM Adrian Klaver <adrian.klaver@akla=
ver.com> wrote:
> > On 8/25/25 09:19, Dominique Devienne wrote:
> > > or I'm reading it wrong? --DD
> > >
> > >  From https://www.postgresql.org/docs/current/sql-altertable.html#SQL=
-ALTERTABLE-DESC-DISABLE-ENABLE-TRIGGER:
> > >> Disabling or enabling internally generated constraint triggers requi=
res superuser privileges
> > >
> > > We were disabling triggers as the owner of the table just fine, no
> > > SUPERUSER involved. So is the doc out-of-date?
> >
> >  From the sentence before the above:
> >
> > "... internally generated constraint triggers, such as those that are
> > used to implement foreign key constraints or deferrable uniqueness and
> > exclusion constraints)."
>
> And? I don't see your point Adrian.
> Has no bearing on the SUPERUSER requirement, in my reading.

OK, maybe my initial was poorly worded. Let me try again:

We were ALTER TABLE {}.{} DISABLE TRIGGER ALL as the table owner.

ALL includes "internally generated constraint triggers", FKs in our case.
Yet the doc clearly states one must be SUPERUSER to do that.

Thus the doc should say "requires owning the altered table, or have
superuser privileges", no?

Hope this is a clearer inquiry. Thanks, --DD