eulerto / pg_restrict Goto Github PK

restrict some SQL commands on PostgreSQL

License: BSD 3-Clause "New" or "Revised" License

Makefile 5.49% C 94.51%

pg_restrict's Issues

restrict ROLE

Restrict ROLE commands (CREATE, ALTER, and DROP) to a master role. There is a parameter to restrict DROP ROLE, however, this proposal is to avoid any role commands.

restrict CREATE TABLE

restrict CREATE TABLE command to a master role

restrict EXTENSION

restrict EXTENSION commands (CREATE, ALTER, and DROP) to a master role.

restrict EVENT TRIGGER

Restrict EVENT TRIGGER commands (CREATE, ALTER, and DROP) to a master role.

restrict PUBLICATION

restrict PUBLICATION commands (CREATE, ALTER, and DROP) to a master role.

restrict VACUUM FULL

Restrict VACUUM FULL command to a master role.

restrict REVOKE

restrict REVOKE command to a master role.

restrict SUBSCRIPTION

restrict SUBSCRIPTION commands (CREATE, ALTER, and DROP) to a master role.

restrict GRANT

restrict GRANT command to a master role.

restrict DATABASE

Restrict DATABASE commands (CREATE, ALTER, and DROP) to a master role. There is a parameter to restrict DROP DATABASE, however, this proposal is to avoid any database commands.

restrict ALTER TABLE

restrict ALTER TABLE command to a master role

restrict LOAD

Restrict LOAD command to a master role.

restrict CHECKPOINT

Restrict CHECKPOINT command to a master role.

restrict TABLESPACE

Restrict TABLESPACE commands (CREATE, ALTER, and DROP) to a master role.

postgres 14 support

solve

diff --git a/pg_restrict.c b/pg_restrict.c
index 0898ede..4d23231 100644
--- a/pg_restrict.c
+++ b/pg_restrict.c
@@ -56,7 +56,11 @@ static bool check_master_roles(char **newval, void **extra,
                                                           GucSource source);
 static void assign_master_roles(const char *newval, void *extra);
 
-#if PG_VERSION_NUM >= 130000
+#if PG_VERSION_NUM >= 140000
+static void pgr_ProcessUtility(PlannedStmt *pstmt, const char *queryString, bool readOnlyTree,
+                                                          ProcessUtilityContext context, ParamListInfo params, QueryEnvironment *queryEnv,
+                                                          DestReceiver *dest, QueryCompletion *qc);
+#elif PG_VERSION_NUM >= 130000
 static void pgr_ProcessUtility(PlannedStmt *pstmt, const char *queryString,
                                                           ProcessUtilityContext context, ParamListInfo params, QueryEnvironment *queryEnv,
                                                           DestReceiver *dest, QueryCompletion *qc);
@@ -151,7 +155,14 @@ _PG_fini(void)
 /*
  * ProcessUtility hook
  */
-#if PG_VERSION_NUM >= 130000
+#if PG_VERSION_NUM >= 140000
+static void
+pgr_ProcessUtility(PlannedStmt *pstmt, const char *queryString, bool readOnlyTree,
+                                  ProcessUtilityContext context, ParamListInfo params, QueryEnvironment *queryEnv,
+                                  DestReceiver *dest, QueryCompletion *qc)
+{
+       Node    *pst = (Node *) pstmt->utilityStmt;
+#elif PG_VERSION_NUM >= 130000
 static void
 pgr_ProcessUtility(PlannedStmt *pstmt, const char *queryString,
                                   ProcessUtilityContext context, ParamListInfo params, QueryEnvironment *queryEnv,
@@ -308,7 +319,16 @@ pgr_ProcessUtility(Node *pst, const char *queryString,
         * Fallback to normal process, be it the previous hook loaded
         * or the in-core code path if the previous hook does not exist.
         */
-#if PG_VERSION_NUM >= 130000
+#if PG_VERSION_NUM >= 140000
+       if (prev_ProcessUtility)
+               prev_ProcessUtility(pstmt, queryString, readOnlyTree,
+                                                       context, params, queryEnv,
+                                                       dest, qc);
+       else
+               standard_ProcessUtility(pstmt, queryString, readOnlyTree,
+                                                               context, params, queryEnv,
+                                                               dest, qc);
+#elif PG_VERSION_NUM >= 130000
        if (prev_ProcessUtility)
                prev_ProcessUtility(pstmt, queryString,
                                                        context, params, queryEnv,

eulerto / pg_restrict Goto Github PK

pg_restrict's People

Contributors

Stargazers

Watchers

Forkers

pg_restrict's Issues

Recommend Projects

Recommend Topics

Recommend Org