Date: Sun, 08 Jun 2008 19:45:33 -0400
From: Robert Treat <xzilla@users.sourceforge.net>
Subject: Re: pg_dump restore time and Foreign Keys
In-reply-to: <23219.1212870176@sss.pgh.pa.us>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Simon Riggs <simon@2ndquadrant.com>, pgsql-hackers@postgresql.org,
	Andrew Dunstan <andrew@dunslane.net>
Message-id: <200806081945.33732.xzilla@users.sourceforge.net>
MIME-version: 1.0
Content-type: text/plain; charset=iso-8859-15
Content-transfer-encoding: 7bit
Content-disposition: inline
References: <1212647003.19964.19.camel@ebony.site>
	<1212860515.12046.78.camel@ebony.site> <23219.1212870176@sss.pgh.pa.us>
User-Agent: KMail/1.9.9

On Saturday 07 June 2008 16:22:56 Tom Lane wrote:
> Simon Riggs <simon@2ndquadrant.com> writes:
> > Perhaps we need a GUC that says expert_mode = on. ...  Another idea
> > might be to make such command options superuser only, to ensure the
> > power is available, yet only in the hands of, by-definition, the trusted
> > few.
>
> This all seems pretty useless, as the sort of user most likely to shoot
> himself in the foot will also always be running as superuser.
>

yeah, i'm not a big fan of "set enable_footgun=true" since the people likely 
to get tripped up are going to blindly enable these modes. 

otoh, if we do such a thing, i would be a big fan of calling 
it "enable_footgun" :-)

> I'd much rather see us expend more effort on speeding up the checks
> than open holes in the system.
>

and i'm sure no one is against that idea, but you're never going to be able to 
match the performance of just avoiding the check. 

-- 
Robert Treat
Build A Brighter LAMP :: Linux Apache {middleware} PostgreSQL