Message-ID: <322cdf29-23b9-90c0-83a0-f4aec182f318@joeconway.com>
Date: Thu, 7 Sep 2023 15:57:22 -0400
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
 Thunderbird/102.15.0
Subject: Re: Possibility to disable `ALTER SYSTEM`
Content-Language: en-US
To: Gabriele Bartolini <gabriele.bartolini@enterprisedb.com>,
 pgsql-hackers@postgresql.org
References: <CA+VUV5rEKt2+CdC_KUaPoihMu+i5ChT4WVNTr4CD5-xXZUfuQw@mail.gmail.com>
From: Joe Conway <mail@joeconway.com>
In-Reply-To: <CA+VUV5rEKt2+CdC_KUaPoihMu+i5ChT4WVNTr4CD5-xXZUfuQw@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: <https://www.postgresql.org/message-id/322cdf29-23b9-90c0-83a0-f4aec182f318%40joeconway.com>
Precedence: bulk

On 9/7/23 15:51, Gabriele Bartolini wrote:
> I would like to propose a patch that allows administrators to disable 
> `ALTER SYSTEM` via either a runt-time option to pass to the Postgres 
> server process at startup (e.g. `--disable-alter-system=true`, false by 
> default) or a new GUC (or even both), without changing the current 
> default method of the server.

Without trying to debate the particulars, a huge +1 for the concept of 
allowing ALTER SYSTEM to be disabled. FWIW I would vote the same for 
control over COPY PROGRAM.

Not coincidentally both concepts were built into set_user: 
https://github.com/pgaudit/set_user

-- 
Joe Conway
PostgreSQL Contributors Team
RDS Open Source Databases
Amazon Web Services: https://aws.amazon.com