Stephen Frost <sfrost(at)snowman(dot)net> writes:
> * Tom Lane (tgl(at)sss(dot)pgh(dot)pa(dot)us) wrote:
>> Seems like the correct answer to that is "use a saner role
>> configuration".
> Far as I can tell anyway. What would you suggest? The point here is
> that joesysadmin shouldn't get full postgres privs on login since most
> of the time he won't need them.
It's sane to set up a manually-used admin account that way, I agree.
What doesn't follow is that an account configured for manual use should
be used for non-interactive stuff like pg_dump.
regards, tom lane