2010/8/16 KaiGai Kohei <kai...@ak.jp.nec.com>: >> I don't really see what the advantage of doing this in single-user >> mode is. If the overhead of permissions-checking is enough to matter, >> maybe that's a sign we're doing something wrong. >> > Hmm... I guess the overhead is not a significant matter, because the > number of system obejcts (not only tables) are less than 3,500. > It will be small enough on recent hardware.
I would think so. More to the point, what is the cost of checking permissions as a percentage of the cost of applying the new labels? If it isn't pretty small, something's not right. Performance will probably be terrible if anyone actually attempts to use this do to real work. > I might have a reason why the script need to launch in single-user > mode, but it is not clear right now, sorry. Another point here is that I wonder if we really need to label system objects at all. Are you applying the same label to all of them? If so, perhaps it might be feasible to set up the code so that it simply assumes that label for every object in the pg_catalog namespace. And if you're NOT setting the label the same way on all of them, then there's a maintenance issue to think about. -- Robert Haas EnterpriseDB: http://www.enterprisedb.com The Enterprise Postgres Company -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers