<div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif">Hello Tatsuo,</div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif">I realized that only a small subset of values can be changed, and also this change will be session-local. <br></div><div class="gmail_default" style="font-family:tahoma,sans-serif">I did not see it initially (in documentation for PGPOOL_SET page), but section 5.1 (<a href="https://www.pgpool.net/docs/43/en/html/config-setting.html#CONFIG-SETTING-SQL-COMMAND-INTERACTION">https://www.pgpool.net/docs/43/en/html/config-setting.html#CONFIG-SETTING-SQL-COMMAND-INTERACTION</a>) states it clearly.<br></div><div class="gmail_default" style="font-family:tahoma,sans-serif">So, i dont think there is a problem!</div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif">Thanks for your help,</div><div class="gmail_default" style="font-family:tahoma,sans-serif">Michail<br></div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jul 7, 2023 at 3:56 PM Tatsuo Ishii <<a href="mailto:ishii@sraoss.co.jp">ishii@sraoss.co.jp</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">> Hello Pgpool team<br>
> <br>
> Is it possible to place any restrictions on which users may execute a<br>
> PGPOOL SET/SHOW command?<br>
<br>
No.<br>
<br>
> As far as I understand, a normal unprivileged user<br>
> (capable of establishing a session with Pgpool frontend) may send a similar<br>
> command.<br>
<br>
Yes.<br>
<br>
> In the case of PGPOOL SET, a user may alter significant parts of<br>
> the server configuration (which seems to me like more powerful than I would<br>
> expect).<br>
<br>
Below are the configuration parameters PGPOOL SET can change its value<br>
in the session. Do you have any concern here?<br>
<br>
                {"log_statement", CFGCXT_SESSION, LOGGING_CONFIG,<br>
                {"log_per_node_statement", CFGCXT_SESSION, LOGGING_CONFIG,<br>
                {"log_client_messages", CFGCXT_SESSION, LOGGING_CONFIG,<br>
                {"check_unlogged_table", CFGCXT_SESSION, GENERAL_CONFIG,<br>
                {"allow_sql_comments", CFGCXT_SESSION, LOAD_BALANCE_CONFIG,<br>
                {"client_idle_limit", CFGCXT_SESSION, CONNECTION_POOL_CONFIG,<br>
                {"client_idle_limit_in_recovery", CFGCXT_SESSION, RECOVERY_CONFIG,<br>
                {"log_error_verbosity", CFGCXT_SESSION, LOGGING_CONFIG,<br>
                {"client_min_messages", CFGCXT_SESSION, LOGGING_CONFIG,<br>
                {"log_min_messages", CFGCXT_SESSION, LOGGING_CONFIG,<br>
<br>
Best reagards,<br>
--<br>
Tatsuo Ishii<br>
SRA OSS LLC<br>
English: <a href="http://www.sraoss.co.jp/index_en/" rel="noreferrer" target="_blank">http://www.sraoss.co.jp/index_en/</a><br>
Japanese:<a href="http://www.sraoss.co.jp" rel="noreferrer" target="_blank">http://www.sraoss.co.jp</a><br>
</blockquote></div>