Re: Possibility to disable `ALTER SYSTEM`

Alvaro Herrera <alvherre@alvh.no-ip.org>

From: Alvaro Herrera <alvherre@alvh.no-ip.org>
To: Magnus Hagander <magnus@hagander.net>
Cc: Tom Lane <tgl@sss.pgh.pa.us>, Gabriele Bartolini <gabriele.bartolini@enterprisedb.com>, Isaac Morland <isaac.morland@gmail.com>, pgsql-hackers@postgresql.org
Date: 2023-09-09T15:14:50Z
Lists: pgsql-hackers

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →
  1. Add allow_alter_system GUC.

  2. Rename COMPAT_OPTIONS_CLIENT to COMPAT_OPTIONS_OTHER.

  3. Remove support for version-0 calling conventions.

On 2023-Sep-08, Magnus Hagander wrote:

> Now, it might be that you don't care at all about the *security* side
> of the feature, and only care about the convenience side. But in that
> case, the original suggestion from Tom of using an even trigger seems
> like a fine enough solution?

ALTER SYSTEM, like all system-wide commands, does not trigger event
triggers.  These are per-database only.

https://www.postgresql.org/docs/16/event-trigger-matrix.html

-- 
Álvaro Herrera               48°01'N 7°57'E  —  https://www.EnterpriseDB.com/
"If it is not right, do not do it.
If it is not true, do not say it." (Marcus Aurelius, Meditations)