Horton

Support SECURITY LABEL on databases, tablespaces, and roles.

Robert Haas <rhaas@postgresql.org>

View on postgr.es
Commit: 463f2625a5fb183b6a8925ccde98bb3889f921d9
Author: Robert Haas <rhaas@postgresql.org>
Date: 2011-07-20T17:18:24Z
Releases: 9.2.0 
Support SECURITY LABEL on databases, tablespaces, and roles.

This requires a new shared catalog, pg_shseclabel.

Along the way, fix the security_label regression tests so that they
don't monkey with the labels of any pre-existing objects.  This is
unlikely to matter in practice, since only the label for the "dummy"
provider was being manipulated.  But this way still seems cleaner.

KaiGai Kohei, with fairly extensive hacking by me.

Files

PathChange+/−
doc/src/sgml/catalogs.sgml modified +78 −0
doc/src/sgml/ref/security_label.sgml modified +3 −0
src/backend/catalog/catalog.c modified +3 −0
src/backend/catalog/Makefile modified +1 −1
src/backend/catalog/system_views.sql modified +31 −1
src/backend/commands/dbcommands.c modified +4 −1
src/backend/commands/seclabel.c modified +177 −6
src/backend/commands/tablespace.c modified +3 −1
src/backend/commands/user.c modified +3 −1
src/backend/parser/gram.y modified +3 −0
src/bin/pg_dump/dumputils.c modified +44 −0
src/bin/pg_dump/dumputils.h modified +4 −0
src/bin/pg_dump/pg_dumpall.c modified +45 −11
src/bin/pg_dump/pg_dump.c modified +18 −0
src/include/catalog/catversion.h modified +1 −1
src/include/catalog/indexing.h modified +3 −0
src/include/catalog/pg_shseclabel.h added +41 −0
src/include/commands/seclabel.h modified +1 −0
src/test/regress/expected/rules.out modified +3 −3
src/test/regress/expected/sanity_check.out modified +2 −1
src/test/regress/input/security_label.source modified +29 −6
src/test/regress/output/security_label.source modified +37 −8