mirror of https://github.com/postgres/postgres
This new catalog holds the privileges which the system was initialized with at initdb time, along with any permissions set by extensions at CREATE EXTENSION time. This allows pg_dump (and any other similar use-cases) to detect when the privileges set on initdb-created or extension-created objects have been changed from what they were set to at initdb/extension-creation time and handle those changes appropriately. Reviews by Alexander Korotkov, Jose Luis Tallonpull/12/head
Stephen Frost
10 years ago
parent
0b62fd036e
commit
6c268df127
@ -0,0 +1,101 @@ |
||||
/*-------------------------------------------------------------------------
|
||||
* |
||||
* pg_init_privs.h |
||||
* definition of the system "initial privileges" relation (pg_init_privs) |
||||
* |
||||
* NOTE: an object is identified by the OID of the row that primarily |
||||
* defines the object, plus the OID of the table that that row appears in. |
||||
* For example, a function is identified by the OID of its pg_proc row |
||||
* plus the pg_class OID of table pg_proc. This allows unique identification |
||||
* of objects without assuming that OIDs are unique across tables. |
||||
* |
||||
* Since attributes don't have OIDs of their own, we identify an attribute |
||||
* privilege by the objoid+classoid of its parent table, plus an "objsubid" |
||||
* giving the attribute column number. "objsubid" must be zero in a privilege |
||||
* for a table itself, so that it is distinct from any column privilege. |
||||
* Currently, objsubid is unused and zero for all other kinds of objects. |
||||
* |
||||
* Portions Copyright (c) 1996-2016, PostgreSQL Global Development Group |
||||
* Portions Copyright (c) 1994, Regents of the University of California |
||||
* |
||||
* src/include/catalog/pg_init_privs.h |
||||
* |
||||
* NOTES |
||||
* the genbki.pl script reads this file and generates .bki |
||||
* information from the DATA() statements. |
||||
* |
||||
* XXX do NOT break up DATA() statements into multiple lines! |
||||
* the scripts are not as smart as you might think... |
||||
* |
||||
*------------------------------------------------------------------------- |
||||
*/ |
||||
#ifndef PG_INIT_PRIVS_H |
||||
#define PG_INIT_PRIVS_H |
||||
|
||||
#include "catalog/genbki.h" |
||||
|
||||
/* ----------------
|
||||
* pg_init_privs definition. cpp turns this into |
||||
* typedef struct FormData_pg_init_privs |
||||
* ---------------- |
||||
*/ |
||||
#define InitPrivsRelationId 3394 |
||||
|
||||
CATALOG(pg_init_privs,3394) BKI_WITHOUT_OIDS |
||||
{ |
||||
Oid objoid; /* OID of object itself */ |
||||
Oid classoid; /* OID of table containing object */ |
||||
int32 objsubid; /* column number, or 0 if not used */ |
||||
char privtype; /* from initdb or extension? */ |
||||
|
||||
#ifdef CATALOG_VARLEN /* variable-length fields start here */ |
||||
aclitem initprivs[1] BKI_FORCE_NOT_NULL; /* initial privs on
|
||||
* object */ |
||||
#endif |
||||
} FormData_pg_init_privs; |
||||
|
||||
/* ----------------
|
||||
* Form_pg_init_privs corresponds to a pointer to a tuple with |
||||
* the format of pg_init_privs relation. |
||||
* ---------------- |
||||
*/ |
||||
typedef FormData_pg_init_privs *Form_pg_init_privs; |
||||
|
||||
/* ----------------
|
||||
* compiler constants for pg_init_privs |
||||
* ---------------- |
||||
*/ |
||||
#define Natts_pg_init_privs 5 |
||||
#define Anum_pg_init_privs_objoid 1 |
||||
#define Anum_pg_init_privs_classoid 2 |
||||
#define Anum_pg_init_privs_objsubid 3 |
||||
#define Anum_pg_init_privs_privtype 4 |
||||
#define Anum_pg_init_privs_privs 5 |
||||
|
||||
/*
|
||||
* It is important to know if the initial privileges are from initdb or from an |
||||
* extension. This enum is used to provide that differentiation and the two |
||||
* places which populate this table (initdb and during CREATE EXTENSION, see |
||||
* recordExtensionInitPriv()) know to use the correct values. |
||||
*/ |
||||
|
||||
typedef enum InitPrivsType |
||||
{ |
||||
INITPRIVS_INITDB = 'i', |
||||
INITPRIVS_EXTENSION = 'e' |
||||
} InitPrivsType; |
||||
|
||||
/* ----------------
|
||||
* initial contents of pg_init_privs |
||||
* ---------------- |
||||
*/ |
||||
|
||||
/*
|
||||
* Because the contents of this table depend on what is done with the other |
||||
* objects in the system (and, in particular, may change due to changes is |
||||
* system_views.sql), there is no initialization here. |
||||
* |
||||
* The initial contents are loaded near the end of initdb. |
||||
*/ |
||||
|
||||
#endif /* PG_INIT_PRIVS_H */ |
||||
Loading…
Reference in new issue