>>>>> "Andres" == Andres Freund <and...@anarazel.de> writes:
Andres> Why is it so much more dangerous? I've seen plenty of corrupted Andres> clusters due to people doing DML against the catalogs. I'm OK Andres> with adding separate GUCs for both, if we want to do that, but Andres> I do think we shouldn't allow updating the catalogs wthout Andres> having having the superuser explicitly opt into that. Be aware that a nonzero number of extensions (postgis especially) do catalog DML in their install or update scripts. While you might well think they shouldn't do that, in practice there is usually no viable alternative. -- Andrew (irc:RhodiumToad)
