Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1iaMOZ-0005Xu-4w for pgsql-hackers@arkaria.postgresql.org; Thu, 28 Nov 2019 16:11:55 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1iaMOX-00080T-V7 for pgsql-hackers@arkaria.postgresql.org; Thu, 28 Nov 2019 16:11:53 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1iaMOX-00080M-J2 for pgsql-hackers@lists.postgresql.org; Thu, 28 Nov 2019 16:11:53 +0000 Received: from sss.pgh.pa.us ([66.207.139.130]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1iaMOU-0001dQ-Ny for pgsql-hackers@postgresql.org; Thu, 28 Nov 2019 16:11:52 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.4/8.14.4) with ESMTP id xASGBiin002132; Thu, 28 Nov 2019 11:11:44 -0500 From: Tom Lane To: Peter Eisentraut cc: Michael Paquier , Alvaro Herrera , pgsql-hackers Subject: Re: allow_system_table_mods stuff In-reply-to: References: <20190913213940.GA20917@alvherre.pgsql> <20191127082619.GB237562@paquier.xyz> Comments: In-reply-to Peter Eisentraut message dated "Wed, 27 Nov 2019 17:01:49 +0100" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <2130.1574957504.1@sss.pgh.pa.us> Date: Thu, 28 Nov 2019 11:11:44 -0500 Message-ID: <2131.1574957504@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Peter Eisentraut writes: > On 2019-11-27 09:26, Michael Paquier wrote: >> Peter, are you planning to look at that again? Note: the patch has no >> reviewers registered. > Here is an updated patch series. > After re-reading the discussion again, I have kept the existing name of > the option. I have also moved the tests to the "unsafe_tests" suite, > which seems like a better place. And I have split the patch into three. Personally I'd have gone with the renaming to allow_system_table_ddl, but it's not a huge point. Updating the code to agree with that naming would make the patch much more invasive, so maybe it's not worth it. > Other than those cosmetic changes, I think everything here has been > discussed and agreed to, so unless anyone expresses any concern or a > wish to do more review, I think this is ready to commit. I read through the patch set and have just one quibble: in the proposed new docs, + Allows modification of the structure of system tables as well as + certain other risky actions on system tables. This is otherwise not + allowed even for superusers. This is used by + initdb. Inconsiderate use of this setting can + cause irretrievable data loss or seriously corrupt the database + system. Only superusers can change this setting. "Inconsiderate" doesn't seem like le mot juste. Maybe "Ill-advised"? (I'm also wondering whether the sentence about initdb is worth keeping.) I marked the CF entry RFC. regards, tom lane