Re: [sepgsql 2/3] Add db_schema:search permission checks
Robert Haas <robertmhaas@gmail.com>
From: Robert Haas <robertmhaas@gmail.com>
To: Kohei KaiGai <kaigai@kaigai.gr.jp>
Cc: PgHacker <pgsql-hackers@postgresql.org>
Date: 2013-04-01T19:41:14Z
Lists: pgsql-hackers
On Tue, Jan 15, 2013 at 3:28 PM, Kohei KaiGai <kaigai@kaigai.gr.jp> wrote: > This patch adds sepgsql support for permission checks equivalent > to the existing SCHEMA USE privilege. > > This feature is constructed on new OAT_SCHEMA_SEARCH event > type being invoked around pg_namespace_aclcheck(). > So, its expected behavior also follows the behavior of existing > permissions; unprivileged schema is ignored from the search path, > or raise an error if object name is fully qualified. > > This patch needs src/backend/catalog/objectaccess.c is existing, > so please apply this patch on top of this feature. > https://commitfest.postgresql.org/action/patch_view?id=1003 KaiGai, Could you please rebase this patch? Thanks, -- Robert Haas EnterpriseDB: http://www.enterprisedb.com The Enterprise PostgreSQL Company