A Question about InvokeObjectPostAlterHook

2023-04-17 Thread Legs Mansion
Recently, I ran into a problem, InvokeObjectPostAlterHook was implemented for 
sepgsql,
sepgsql use it to determine whether to check permissions during certain 
operations.
But InvokeObjectPostAlterHook doesn't handle all of the alter's behavior, at 
least the table is not controlled. e.g., ALTER TABLE... ENABLE/DISABLE ROW 
LEVEL SECURITY,ALTER TABLE ... DISABLE TRIGGER, GRANT and REVOKE and so on.
Whether InvokeObjectPostAlterHook is not fully controlled? it's a bug?




发自我的iPhone

Re: A Question about InvokeObjectPostAlterHook

2023-04-21 Thread Legs Mansion
Hi Michael
thank you for your explanation.
actually, some location can be tricky to add.
it looks like CREATE, but it’s actually ALTER, should call 
InvokeObjectPostAlterHook instead of InvokeObjectPostCreateHook? 
eg.,CREATE OR REPLACE, CREATE TYPE(perfecting shell type)


Thank you

-- Original --
From: Michael Paquier