Re: [v9.1] Add security hook on initialization of instance - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: [v9.1] Add security hook on initialization of instance
Date
Msg-id 20100708144251.GO21875@tamriel.snowman.net
Whole thread Raw
In response to Re: [v9.1] Add security hook on initialization of instance  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> Maybe so, but the proposed hook placement doesn't actually allow a
> plugin module to be "involved" in the authorization --- we've already
> decided the authorization is OK.  All it can do there is some additional
> initialization, which could equally well be done on first use (if any)
> of the additional information.

Right, I agree that the existing patch isn't what should be done here.

> There might be some value in letting a plugin actually have some control
> over the authentication process, but I'm not sure offhand what a
> reasonable hook design would be.

Definitely needs more thought, but that's the direction that I think
makes more sense.
Thanks!
    Stephen

pgsql-hackers by date:

Previous
From: Robert Haas
Date:
Subject: Re: [v9.1] Add security hook on initialization of instance
Next
From: Stephen Frost
Date:
Subject: Re: [v9.1] Add security hook on initialization of instance