Date: Tue, 3 Jul 2018 10:21:59 +0900
From: Michael Paquier <michael@paquier.xyz>
To: "Yotsunaga, Naoki" <yotsunaga.naoki@jp.fujitsu.com>
Cc: "David G. Johnston" <david.g.johnston@gmail.com>,
	Postgres hackers <pgsql-hackers@postgresql.org>
Subject: Re: automatic restore point
Message-ID: <20180703012159.GE2159@paquier.xyz>
References: <8E9126CB6CE2CD42962059AB0FBF7B0DBE3167@g01jpexmbkw23>
 <CAKFQuwamx96qu6GAM8OuoM3DNEockiiiE=VOx1LV0_Hag5bOrQ@mail.gmail.com>
 <CAMsGm5cbv6BwqzsUHGVDUvn5yMePhyZBCfPhND88QAWv6MqwOA@mail.gmail.com>
 <20180626051600.GC31353@paquier.xyz>
 <8E9126CB6CE2CD42962059AB0FBF7B0DBF3ACC@g01jpexmbkw23>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="lteA1dqeVaWQ9QQl"
Content-Disposition: inline
In-Reply-To: <8E9126CB6CE2CD42962059AB0FBF7B0DBF3ACC@g01jpexmbkw23>
Precedence: bulk


--lteA1dqeVaWQ9QQl
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Tue, Jul 03, 2018 at 01:06:31AM +0000, Yotsunaga, Naoki wrote:
>> I'd rather spend effort making the initial execution of said commands
>> less likely.
>
> I think that the function to prohibit DELETE and UPDATE without a
> WHERE clause in the later response is good way.

This has popped up already in the lists in the past.

> But I think that it is impossible to completely eliminate the failure
> of the other commands.  For example, drop the wrong table.

This kind of thing is heavily application-dependent.  For example, you
would likely not care if an operator, who has newly-joined the team in
charge of the maintenance of this data, drops unfortunately a table
which includes logs from 10 years back, and you would very likely care
about a table dropped which has user's login data.  My point is that you
need to carefully design the shape of the configuration you would use,
so as any application's admin would be able to cope with it, for example
allowing exclusion filters with regular expressions could be a good idea
to dig into.  And also you need to think about it so as it is backward
compatible.
--
Michael

--lteA1dqeVaWQ9QQl
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=3fgw
-----END PGP SIGNATURE-----

--lteA1dqeVaWQ9QQl--