[sepgsql 2/3] Add db_schema:search permission checks - Mailing list pgsql-hackers

From Kohei KaiGai
Subject [sepgsql 2/3] Add db_schema:search permission checks
Date
Msg-id CADyhKSXatv4JHCVaPawXO7UXWRr-W-sn5r2a_GgLJDvt8j2jDA@mail.gmail.com
Whole thread Raw
Responses Re: [sepgsql 2/3] Add db_schema:search permission checks
Re: [sepgsql 2/3] Add db_schema:search permission checks
List pgsql-hackers
This patch adds sepgsql support for permission checks equivalent
to the existing SCHEMA USE privilege.

This feature is constructed on new OAT_SCHEMA_SEARCH event
type being invoked around pg_namespace_aclcheck().
So, its expected behavior also follows the behavior of existing
permissions; unprivileged schema is ignored from the search path,
or raise an error if object name is fully qualified.

This patch needs src/backend/catalog/objectaccess.c is existing,
so please apply this patch on top of this feature.
https://commitfest.postgresql.org/action/patch_view?id=1003

Thanks,
--
KaiGai Kohei <kaigai@kaigai.gr.jp>

Attachment

pgsql-hackers by date:

Previous
From: Sergey Koposov
Date:
Subject: Re: Curious buildfarm failures (fwd)
Next
From: Christopher Browne
Date:
Subject: Re: [PATCH] COPY .. COMPRESSED