On Mon, Apr 24, 2006 at 06:16:30PM +0800, Qingqing Zhou wrote:
> Is it possible to have a superuser who could do CHECKPOINT, BACKUP and
> whatever but could not see any user data?
Not for backup. It'd be rather tricky to allow backing up data without
being able to read it, afterall.
I believe CHECKPOINT is protected since repeatedly calling it could
result in performance problems, but you can probably get around that if
needed by using a security-definer function.
Why do you want non-superusers to be able to checkpoint, anyway?
--
Jim C. Nasby, Sr. Engineering Consultant jnasby@pervasive.com
Pervasive Software http://pervasive.com work: 512-231-6117
vcard: http://jim.nasby.net/pervasive.vcf cell: 512-569-9461