Re: [v9.1] Add security hook on initialization of instance - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: [v9.1] Add security hook on initialization of instance
Date
Msg-id 20100708144826.GP21875@tamriel.snowman.net
Whole thread Raw
In response to Re: [v9.1] Add security hook on initialization of instance  (Robert Haas <robertmhaas@gmail.com>)
Responses Re: [v9.1] Add security hook on initialization of instance
List pgsql-hackers
* Robert Haas (robertmhaas@gmail.com) wrote:
> I think we have to assume that whatever actions a pluggable security
> provider might take at authentication time are going to be based on
> information from outside the database.

I feel that would be perfect for 9.1 and supporting access to the
general catalog is something that, if we figure out a sane way to
do it, we could always add later (if there's demand, etc).

For those bits of the catalog which *do* meet the requirements you
mention, I hope it'll be possible for the security module to access
them?  Does make me wonder if we might consider adding a field to those
to support a label rather than trying to figure out a way for a third
party to provide a shared/nailed relation.
Thanks,
    Stephen

pgsql-hackers by date:

Previous
From: Stephen Frost
Date:
Subject: Re: [v9.1] Add security hook on initialization of instance
Next
From: Robert Haas
Date:
Subject: Re: [v9.1] Add security hook on initialization of instance