Horton

Re: Possibility to disable `ALTER SYSTEM`

Bruce Momjian <bruce@momjian.us>

View thread
From: Bruce Momjian <bruce@momjian.us>
To: Jelte Fennema-Nio <postgres@jeltef.nl>
Cc: Robert Haas <robertmhaas@gmail.com>, "David G. Johnston" <david.g.johnston@gmail.com>, Maciek Sakrejda <m.sakrejda@gmail.com>, Isaac Morland <isaac.morland@gmail.com>, Greg Sabino Mullane <htamfids@gmail.com>, Andrew Dunstan <andrew@dunslane.net>, Tom Lane <tgl@sss.pgh.pa.us>, Heikki Linnakangas <hlinnaka@iki.fi>, PostgreSQL Hackers <pgsql-hackers@postgresql.org>, Daniel Gustafsson <daniel@yesql.se>, Joel Jacobson <joel@compiler.org>, Gabriele Bartolini <gabriele.bartolini@enterprisedb.com>, Magnus Hagander <magnus.hagander@redpill-linpro.com>
Date: 2024-03-28T20:24:05Z
Lists: pgsql-hackers

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

  1. Add allow_alter_system GUC.

  2. Rename COMPAT_OPTIONS_CLIENT to COMPAT_OPTIONS_OTHER.

  3. Remove support for version-0 calling conventions.

On Thu, Mar 28, 2024 at 01:23:36PM +0100, Jelte Fennema-Nio wrote:
> +       <para>
> +        Turning this setting off is intended for environments where the
> +        configuration of <productname>PostgreSQL</productname> is managed by
> +        some external tool.
> +        In such environments, a well intentioned superuser might
> +        <emphasis>mistakenly</emphasis> use <command>ALTER SYSTEM</command>
> +        to change the configuration instead of using the external tool.
> +        This might result in unintended behavior, such as the external tool
> +        discarding the change at some later point in time when it updates the

"discarding" -> "overwriting" ?

> +  <para>
> +   <literal>ALTER SYSTEM</literal> can be disabled by setting
> +   <xref linkend="guc-allow-alter-system"/> to <literal>off</literal>, but this
> +   is no security mechanism (as explained in detail in the documentation for

"is no" -> "is not a"

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EDB                                      https://enterprisedb.com

  Only you can decide what is important to you.