user meta (to the database, at least) information

I've got a system that includes an admin tool that forces the
user to be logged into the database as the specific user. Currently,
we synchronize password updates and such with ALTER USER statements,
but maintain some non-pg_shadow information in our own table. I've
got a QA guy here who says "every other database I've worked with
lets people add their own fields to the user tables, why can't you
just do that".

Is it safe to modify pg_shadow? Is there a better way to do
this then (as we currently do) have the client scripting manage
the stuff seperately? Should I spend some time using triggers
to abstract away the GRANT/ALTER statements?

--
Adam Haberlach | All your base are belong to us.
adam(at)newsnipple(dot)com |
http://www.newsnipple.com |
'88 EX500 '00 >^< |