From: Jan Wieck <JanWieck@Yahoo.com>
To: Stephan Szabo <sszabo@megazone.bigpanda.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Bruce Momjian <pgman@candle.pha.pa.us>
Cc: Christopher Kings-Lynne <chriskl@familyhealth.com.au>
Cc: Peter Childs <Blue.Dragon@blueyonder.co.uk>
Cc: PostgreSQL-development <pgsql-hackers@postgresql.org>
Subject: Re: ADD FOREIGN KEY (was Re: [GENERAL] 7.4Beta)
Date: Tue, 30 Sep 2003 13:28:04 -0400
Message-ID: <3F79BD24.3090400@Yahoo.com> (raw)
In-Reply-To: <20030930074408.H14474@megazone.bigpanda.com>
References: <200309301233.h8UCXcQ21796@candle.pha.pa.us>
<19140.1064930871@sss.pgh.pa.us>
<20030930074408.H14474@megazone.bigpanda.com>
Stephan Szabo wrote:
> On Tue, 30 Sep 2003, Tom Lane wrote:
>
>> I see where Stephan is coming from, but in my mind disabling consistency
>> checks ought to be a feature reserved to the DBA (ie superuser), who
>> presumably has some clue about the tradeoffs involved. I don't think
>> ordinary users should be able to do it. If we can get the cost of
>> performing the initial check down to something reasonable (and I don't
>> mean "near zero", I mean something that's small in comparison to the
>> other costs of loading data and creating indexes), then I think we've
>> done as much as we should do for ordinary users.
>
> Limiting the cases under which constraint ignoring works is certainly
> fine by me, but I was assuming that we were trying to make it accessable
> to any restore. If that's not true, then we don't need to worry about that
> part of the issue.
It is not true.
Fact is that restoring can require more rights than creating the dump.
That is already the case if you want to restore anything that contains
objects owned by different users. Trying to enable everyone who can take
a dump also to restore it, by whatever mechanism, gives someone the
right to revert things in time and create a situation (consistent or
not) that he could not (re)create without doing dump/restore. This is
wrong and should not be possible.
Jan
--
#======================================================================#
# It's easier to get forgiveness for being wrong than for being right. #
# Let's break this rule - forgive me. #
#================================================== JanWieck@Yahoo.com #
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: JanWieck@Yahoo.com, sszabo@megazone.bigpanda.com, tgl@sss.pgh.pa.us, pgman@candle.pha.pa.us, chriskl@familyhealth.com.au, Blue.Dragon@blueyonder.co.uk
Subject: Re: ADD FOREIGN KEY (was Re: [GENERAL] 7.4Beta)
In-Reply-To: <3F79BD24.3090400@Yahoo.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox