sepgsql: Enforce db_procedure:{execute} permission.
To do this, we add an additional object access hook type,
OAT_FUNCTION_EXECUTE.
KaiGai Kohei
Branch
------
master
Details
-------
http://git.postgresql.org/pg/commitdiff/f8a54e936bdf4c31b395a2ab7d7bc98eefa6dbad
Modified Files
--------------
contrib/sepgsql/expected/label.out | 17 +++++++++
contrib/sepgsql/expected/misc.out | 67 ++++++++++++++++++++++++++++++++++
contrib/sepgsql/hooks.c | 7 ++++
contrib/sepgsql/label.c | 23 +++++++++++-
contrib/sepgsql/proc.c | 26 +++++++++++++
contrib/sepgsql/sepgsql-regtest.te | 23 +++---------
contrib/sepgsql/sepgsql.h | 1 +
contrib/sepgsql/sql/label.sql | 2 +
contrib/sepgsql/sql/misc.sql | 25 +++++++++++++
doc/src/sgml/sepgsql.sgml | 7 +++-
src/backend/catalog/objectaccess.c | 17 +++++++++
src/backend/executor/execQual.c | 3 ++
src/backend/executor/nodeAgg.c | 4 ++
src/backend/executor/nodeWindowAgg.c | 4 ++
src/backend/tcop/fastpath.c | 1 +
src/include/catalog/objectaccess.h | 14 +++++++
16 files changed, 220 insertions(+), 21 deletions(-)
