On Mon, Apr 24, 2006 at 06:16:30PM +0800, Qingqing Zhou wrote: > Is it possible to have a superuser who could do CHECKPOINT, BACKUP and > whatever but could not see any user data?
Not for backup. It'd be rather tricky to allow backing up data without being able to read it, afterall. I believe CHECKPOINT is protected since repeatedly calling it could result in performance problems, but you can probably get around that if needed by using a security-definer function. Why do you want non-superusers to be able to checkpoint, anyway? -- Jim C. Nasby, Sr. Engineering Consultant [EMAIL PROTECTED] Pervasive Software http://pervasive.com work: 512-231-6117 vcard: http://jim.nasby.net/pervasive.vcf cell: 512-569-9461 ---------------------------(end of broadcast)--------------------------- TIP 1: if posting/reading through Usenet, please send an appropriate subscribe-nomail command to [EMAIL PROTECTED] so that your message can get through to the mailing list cleanly
