Add object TRUNCATE hook
Joe Conway <mail@joeconway.com>
Add object TRUNCATE hook All operations with acl permissions checks should have a corresponding hook so that, for example, mandatory access control (MAC) may be enforced by an extension. The command TRUNCATE is missing this hook, so add it. Patch by Yuli Khodorkovskiy with some editorialization by me. Based on the discussion not back-patched. A separate patch will exercise the hook in the sepgsql extension. Author: Yuli Khodorkovskiy Reviewed-by: Joe Conway Discussion: https://postgr.es/m/CAFL5wJcomybj1Xdw7qWmPJRpGuFukKgNrDb6uVBaCMgYS9dkaA%40mail.gmail.com
Files
| Path | Change | +/− |
|---|---|---|
| src/backend/catalog/objectaccess.c | modified | +17 −0 |
| src/backend/commands/tablecmds.c | modified | +2 −0 |
| src/include/catalog/objectaccess.h | modified | +13 −1 |
Discussion
- add a MAC check for TRUNCATE 39 messages · 2019-07-24 → 2019-11-23