Horton

A Question about InvokeObjectPostAlterHook

Legs Mansion <1027644833@qq.com>

View thread View on postgr.es
From: Legs Mansion <1027644833@qq.com>
To: pgsql-hackers <pgsql-hackers@postgresql.org>
Date: 2023-04-18T01:51:30Z
Lists: pgsql-hackers 
Recently, I ran into a problem, InvokeObjectPostAlterHook was implemented for sepgsql,
sepgsql use it to determine whether to check permissions during certain operations.
But InvokeObjectPostAlterHook doesn't handle all of the alter's behavior, at least the table is not controlled.&nbsp;e.g., ALTER TABLE... ENABLE/DISABLE ROW LEVEL SECURITY，ALTER TABLE ... DISABLE TRIGGER, GRANT and REVOKE and so on.
Whether InvokeObjectPostAlterHook&nbsp;is not fully controlled? it's a bug?




发自我的iPhone

Commits

  1. Add OAT hook calls for more subcommands of ALTER TABLE