Re: How to have a blind-superuser

On Mon, Apr 24, 2006 at 06:16:30PM +0800, Qingqing Zhou wrote:
> Is it possible to have a superuser who could do CHECKPOINT, BACKUP and
> whatever but could not see any user data?

Not for backup. It'd be rather tricky to allow backing up data without
being able to read it, afterall.

I believe CHECKPOINT is protected since repeatedly calling it could
result in performance problems, but you can probably get around that if
needed by using a security-definer function.

Why do you want non-superusers to be able to checkpoint, anyway?
--
Jim C. Nasby, Sr. Engineering Consultant      jnasby@pervasive.com
Pervasive Software      http://pervasive.com    work: 512-231-6117
vcard: http://jim.nasby.net/pervasive.vcf       cell: 512-569-9461