I wrote:
> Andres Freund <andres@anarazel.de> writes:
>> It seems to me that FROM UNPACKAGED shouldn't support trusted.
> Hmm, seems like a reasonable idea, but I'm not quite sure how to mechanize
> it given that "unpackaged" isn't magic in any way so far as extension.c
> is concerned. Maybe we could decide that the time for supporting easy
> updates from pre-9.1 is past, and just remove all the unpackaged-to-XXX
> scripts? Maybe even remove the "FROM version" option altogether.
[ thinks some more... ] A less invasive idea would be to insist that
you be superuser to use the FROM option. But I'm thinking that the
unpackaged-to-XXX scripts are pretty much dead letters anymore. Has
anyone even tested them in years? How much longer do we want to be
on the hook to fix them?
regards, tom lane