Where to hook my custom access control module?

From: Karel Gardas <kgardas(at)objectsecurity(dot)com>
To: pgsql-hackers(at)postgresql(dot)org
Subject: Where to hook my custom access control module?
Date: 2007-05-09 14:41:42
Message-ID: Pine.LNX.4.63.0705091640060.3847@silence.gardas.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers


Hello,

first of all, I've tried to ask on pgsql-general mailing list as advised,
but no answer.

I'd like to look at a possibility of integrating OpenPMF
(http://www.openpmf.org) with the PostgreSQL. There is a possibility to
have a "weak" integration by using a provided rule system and SQL, but
this way we would lose central management functionality of OpenPMF,
especially its policy violation notifications and we'll need to
synchronize rules with policies from time to time. So now I think about
how to directly integrate some kind of OpenPMF policy enforcement point
into the PostgreSQL. For this I would need some access control hook inside
PostgreSQL which would be called on every action and my PEP would get a
chance to deny some access. Is there anything like that supported in the
PostgreSQL?

Thanks!
Karel
--
Karel Gardas kgardas(at)objectsecurity(dot)com
ObjectSecurity Ltd. http://www.objectsecurity.com

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Jim Nasby 2007-05-09 15:55:12 Re: [COMMITTERS] pgsql: Teach tuplesort.c about "top N" sorting, in which only the first
Previous Message Andrew Dunstan 2007-05-09 14:28:57 Re: Where to hook my custom access control module?