Re: Proposal: Allow user with pg_monitor role to call pg_stat_reset* functions

Поиск
Список
Период
Сортировка
От Robert Haas
Тема Re: Proposal: Allow user with pg_monitor role to call pg_stat_reset* functions
Дата
Msg-id CA+TgmobOWQrspMqzYztXqgbP3barCL39Z=y51yfbY2jteMnY7A@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Proposal: Allow user with pg_monitor role to call pg_stat_reset* functions  (Andres Freund <andres@anarazel.de>)
Ответы Re: Proposal: Allow user with pg_monitor role to call pg_stat_reset* functions  (Julien Rouhaud <rjuju123@gmail.com>)
Список pgsql-hackers
On Mon, Nov 21, 2022 at 3:45 PM Andres Freund <andres@anarazel.de> wrote:
> On 2022-11-21 00:16:20 -0800, sirisha chamarthi wrote:
> > At present, calling pg_stat_reset* functions requires super user access
> > unless explicitly grant execute permission on those. In this thread, I am
> > proposing to grant execute on them to users with pg_monitor role
> > permissions. This comes handy to the monitoring users (part of pg_monitor
> > role) to capture the stats fresh and analyze. Do you see any concerns with
> > this approach?
>
> I think the common assumption is that a monitoring role cannot modify
> the system, but this would change that. Normally a monitoring tool
> should be able to figure out what changed in stats by comparing values
> across time, rather than resetting stats.

+1.

-- 
Robert Haas
EDB: http://www.enterprisedb.com



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Andres Freund
Дата:
Сообщение: Re: Proposal: Allow user with pg_monitor role to call pg_stat_reset* functions
Следующее
От: Laurenz Albe
Дата:
Сообщение: Re: Reducing power consumption on idle servers