Dear Michael, > Perhaps a very naive question, but is there any point in authorizing > manipulations of MyReplicationSlot in single-user mode, to begin with? > With this remark, I would mean to apply a rule to > ReplicationSlotAcquire(), so as all its callers would know about that.
According to the original thread [1], there was a wide consensus replication-related operations can be rejected, except the slot removal. I feel this is reasonable. Currently pg_drop_replication_slot() requires the droping slot can be acquired, so we cannot reject it in single user mode as-is. Maybe we should revive the 0002 patch in [1] then try to do that. Thought? [1]: https://www.postgresql.org/message-id/3b2f809f-326c-38dd-7a9e-897f957a4eb1%40enterprisedb.com Best regards, Hayato Kuroda FUJITSU LIMITED