Re: security label support, revised - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: security label support, revised
Date
Msg-id 20100923180652.GS26232@tamriel.snowman.net
Whole thread Raw
In response to Re: security label support, revised  (Robert Haas <robertmhaas@gmail.com>)
Responses Re: security label support, revised  (Robert Haas <robertmhaas@gmail.com>)
List pgsql-hackers
* Robert Haas (robertmhaas@gmail.com) wrote:
> The point is that SECURITY LABEL, as coded, will fail utterly unless
> there is a label provider loaded.  So you can't actually run it and
> check the results in the catalog without loading a contrib module.

Urgh, yes, point.  Well, we could test that it errors out correctly. :)

Another thought might be to allow the "check if a module is loaded
before doing things" to be a postgresql.conf option that is disabled in
the regression testing..  If you can modify postgresql.conf you can
remove the module anyway..  Interesting question as to if we should
auto-fail queries against objects which have labels when no security
module is loaded.  Have we discussed that yet?
Thanks,
    Stephen

pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: Why is time with timezone 12 bytes?
Next
From: Magnus Hagander
Date:
Subject: Re: .gitignore files, take two