KaiGai Kohei <kaigai@kaigai.gr.jp> writes:
> (2010/10/19 21:31), Robert Haas wrote:
>> I think you're still misreading it.
> Hmm. In my understanding, it seems to me he concerned about possible leaky
> estimate functions, so he mentioned the horrible performance degrading, if
> we don't allow to execute these functions.
No, it wasn't about estimator functions at all, it was about what we do
in the absence of an estimator.
> So, I suggested an idea that enforces all estimate functions being installed
> by superusers; it enables us to assume they are enough safe.
Even if we were willing to accept a limitation as stringent as that,
preventing people from installing estimators is hardly going to cure
the problem.
regards, tom lane