Robert Haas <robertmhaas@gmail.com> writes:
> On Thu, Dec 13, 2012 at 5:25 PM, Andres Freund <andres@2ndquadrant.com> wrote:
>> That would solve the consistency problem, yes. Would we need a special
>> kind of permission for this? I would say superuser/database owner only?
> Yeah, I doubt we would need a whole new permission for it, but it
> would certainly have to be disallowed for ordinary users.
Giving up the ability to run pg_dump as a non-superuser would be
pretty annoying, so this would have to be an optional feature if we
restrict it that way.
regards, tom lane