On 9/7/23 15:51, Gabriele Bartolini wrote:
I would like to propose a patch that allows administrators to disable `ALTER SYSTEM` via either a runt-time option to pass to the Postgres server process at startup (e.g. `--disable-alter-system=true`, false by default) or a new GUC (or even both), without changing the current default method of the server.
Without trying to debate the particulars, a huge +1 for the concept of allowing ALTER SYSTEM to be disabled. FWIW I would vote the same for control over COPY PROGRAM.
Not coincidentally both concepts were built into set_user: https://github.com/pgaudit/set_user
-- Joe Conway PostgreSQL Contributors Team RDS Open Source Databases Amazon Web Services: https://aws.amazon.com
