diff options
| author | Robert Haas <rhaas@postgresql.org> | 2012-03-09 14:34:56 -0500 |
|---|---|---|
| committer | Robert Haas <rhaas@postgresql.org> | 2012-03-09 14:34:56 -0500 |
| commit | 07d1edb954bc8f5d0e2c010dec8482328af38cb8 (patch) | |
| tree | 64418e4a346496da207c943b460cd692775f971d /src/backend/commands/dbcommands.c | |
| parent | b14953932dfdda7d915b9e276a09df8458efeec8 (diff) | |
| download | postgresql-07d1edb954bc8f5d0e2c010dec8482328af38cb8.tar.gz postgresql-07d1edb954bc8f5d0e2c010dec8482328af38cb8.zip | |
Extend object access hook framework to support arguments, and DROP.
This allows loadable modules to get control at drop time, perhaps for the
purpose of performing additional security checks or to log the event.
The initial purpose of this code is to support sepgsql, but other
applications should be possible as well.
KaiGai Kohei, reviewed by me.
Diffstat (limited to 'src/backend/commands/dbcommands.c')
| -rw-r--r-- | src/backend/commands/dbcommands.c | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/src/backend/commands/dbcommands.c b/src/backend/commands/dbcommands.c index 42a8b31b2a8..91d74815287 100644 --- a/src/backend/commands/dbcommands.c +++ b/src/backend/commands/dbcommands.c @@ -515,7 +515,8 @@ createdb(const CreatedbStmt *stmt) copyTemplateDependencies(src_dboid, dboid); /* Post creation hook for new database */ - InvokeObjectAccessHook(OAT_POST_CREATE, DatabaseRelationId, dboid, 0); + InvokeObjectAccessHook(OAT_POST_CREATE, + DatabaseRelationId, dboid, 0, NULL); /* * Force a checkpoint before starting the copy. This will force dirty @@ -777,6 +778,15 @@ dropdb(const char *dbname, bool missing_ok) aclcheck_error(ACLCHECK_NOT_OWNER, ACL_KIND_DATABASE, dbname); + /* DROP hook for the database being removed */ + if (object_access_hook) + { + ObjectAccessDrop drop_arg; + memset(&drop_arg, 0, sizeof(ObjectAccessDrop)); + InvokeObjectAccessHook(OAT_DROP, + DatabaseRelationId, db_id, 0, &drop_arg); + } + /* * Disallow dropping a DB that is marked istemplate. This is just to * prevent people from accidentally dropping template0 or template1; they |