Re: pgaudit - an auditing extension for PostgreSQL - Mailing list pgsql-hackers

From Tom Lane
Subject Re: pgaudit - an auditing extension for PostgreSQL
Date
Msg-id 11546.1406746684@sss.pgh.pa.us
Whole thread Raw
In response to Re: pgaudit - an auditing extension for PostgreSQL  (Stephen Frost <sfrost@snowman.net>)
Responses Re: pgaudit - an auditing extension for PostgreSQL
List pgsql-hackers
Stephen Frost <sfrost@snowman.net> writes:
> * Bruce Momjian (bruce@momjian.us) wrote:
>> Actually, thinking more, Stephen Frost mentioned that the auditing
>> system has to modify database _state_, and dumping/restoring the state
>> of an extension might be tricky.

> This is really true of any extension which wants to attach information
> or track things associated with roles or other database objects.  What
> I'd like to avoid is having an extension which does so through an extra
> table or through reloptions or one of the other approaches which exists
> in contrib and which implements a capability we're looking at adding to
> core

We have core code that uses reloptions --- autovacuum for instance ---
so I'm not exactly clear on why that's so unacceptable for this.

If the concern is that the required metadata is going to change over time,
I'd suggest that maybe an extension is the right place for it,
permanently.  We have some infrastructure for extension version upgrades,
which could cope with metadata changes.  There's not nearly as much
provision for changes of core state.
        regards, tom lane



pgsql-hackers by date:

Previous
From: Stephen Frost
Date:
Subject: Re: pgaudit - an auditing extension for PostgreSQL
Next
From: Daniele Varrazzo
Date:
Subject: Fixed redundant i18n strings in json