Horton

Re: Disabling ALTER SYSTEM SET WAS: Re: ALTER SYSTEM SET command to change postgresql.conf parameters

Rodrigo Gonzalez <rjgonzale.lists@gmail.com>

View thread View on postgr.es
From: Rodrigo Gonzalez <rjgonzale.lists@gmail.com>
To: Alvaro Herrera <alvherre@2ndquadrant.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>, Bruce Momjian <bruce@momjian.us>, Stephen Frost <sfrost@snowman.net>, Josh Berkus <josh@agliodbs.com>, Andres Freund <andres@2ndquadrant.com>, Greg Stark <stark@mit.edu>, Fujii Masao <masao.fujii@gmail.com>, Robert Haas <robertmhaas@gmail.com>, Amit Kapila <amit.kapila@huawei.com>, Dimitri Fontaine <dimitri@2ndquadrant.fr>, pgsql-hackers@postgresql.org
Date: 2013-08-05T20:31:08Z
Lists: pgsql-hackers 
On Mon, 5 Aug 2013 15:53:01 -0400
Alvaro Herrera <alvherre@2ndquadrant.com> wrote:

> The other issue is that currently you can only edit a server's config
> if you are logged in to it.  If we permit SQL-level access to that,
> and somebody who doesn't have access to edit the files blocks
> themselves out, there is no way for them to get a working system *at
> all*.
> 

This is not a valid point, at least for me....basically all OSs should
disable any change to firewall if you are connected remotely cause you
can block yourself....giving power to users does not mean being their
babysitter....we should smart enough to use the power we receive...if
we are not smart...we should start thinking about other profession

And excuse my English, I hope the point is clear...

Best regards

Rodrigo Gonzalez