Re: leaky views, yet again

Tom Lane <tgl@sss.pgh.pa.us>

From: Tom Lane <tgl@sss.pgh.pa.us>
To: KaiGai Kohei <kaigai@kaigai.gr.jp>
Cc: Robert Haas <robertmhaas@gmail.com>, KaiGai Kohei <kaigai@ak.jp.nec.com>, Kevin Grittner <Kevin.Grittner@wicourts.gov>, HeikkiLinnakangas <heikki.linnakangas@enterprisedb.com>, Itagaki Takahiro <itagaki.takahiro@gmail.com>, "pgsql-hackers@postgresql.org" <pgsql-hackers@postgresql.org>
Date: 2010-10-19T14:41:08Z
Lists: pgsql-hackers
KaiGai Kohei <kaigai@kaigai.gr.jp> writes:
> (2010/10/19 21:31), Robert Haas wrote:
>> I think you're still misreading it.

> Hmm. In my understanding, it seems to me he concerned about possible leaky
> estimate functions, so he mentioned the horrible performance degrading, if
> we don't allow to execute these functions.

No, it wasn't about estimator functions at all, it was about what we do
in the absence of an estimator.

> So, I suggested an idea that enforces all estimate functions being installed
> by superusers; it enables us to assume they are enough safe.

Even if we were willing to accept a limitation as stringent as that,
preventing people from installing estimators is hardly going to cure
the problem.

			regards, tom lane