Re: Providing catalog view to pg_hba.conf file - Patch submission - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: Providing catalog view to pg_hba.conf file - Patch submission
Date
Msg-id 54F77C04.4060708@gmx.net
Whole thread Raw
In response to Re: Providing catalog view to pg_hba.conf file - Patch submission  (Jim Nasby <Jim.Nasby@BlueTreble.com>)
Responses Re: Providing catalog view to pg_hba.conf file - Patch submission  (Pavel Stehule <pavel.stehule@gmail.com>)
Re: Providing catalog view to pg_hba.conf file - Patch submission  (Greg Stark <stark@mit.edu>)
List pgsql-hackers
On 3/3/15 7:17 PM, Jim Nasby wrote:
> I think we're screwed in that regard anyway, because of the special
> constructs. You'd need different logic to handle things like +role and
> sameuser. We might even end up painted in a corner where we can't change
> it in the future because it'll break everyone's scripts.

Yeah, I'm getting worried about this.  I think most people agree that
getting a peek at pg_hba.conf from within the server is useful, but
everyone seems to have quite different uses for it.  Greg wants to join
against other catalog tables, Jim wants to reassemble a valid and
accurate pg_hba.conf, Josh wants to write an editing tool.  Personally,
I'd like to see something as close to the actual file as possible.

If there were an obviously correct way to map the various special
constructs to the available SQL data types, then fine.  But if there
isn't, then we shouldn't give a false overinterpretation.  So I'd render
everything that's disputed as a plain text field.  (Not even an array of
text.)



pgsql-hackers by date:

Previous
From: Stephen Frost
Date:
Subject: Re: MD5 authentication needs help
Next
From: Peter Eisentraut
Date:
Subject: Re: New CF app deployment