|From:||Bruce Momjian <bruce(at)momjian(dot)us>|
|To:||David Steele <david(at)pgmasters(dot)net>|
|Cc:||Alvaro Herrera <alvherre(at)2ndquadrant(dot)com>, Robert Haas <robertmhaas(at)gmail(dot)com>, Stephen Frost <sfrost(at)snowman(dot)net>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>, Pg Hackers <pgsql-hackers(at)postgresql(dot)org>, "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>, Jim Nasby <Jim(dot)Nasby(at)bluetreble(dot)com>|
|Subject:||Re: PostgreSQL Audit Extension|
|Views:||Raw Message | Whole Thread | Download mbox | Resend email|
On Fri, Feb 19, 2016 at 11:20:13AM -0500, David Steele wrote:
> On 2/19/16 10:54 AM, Alvaro Herrera wrote:
> > Bruce Momjian wrote:
> >> Understood. My point is that there is a short list of read events, and
> >> many DDL events. We have already hesitated to record DDL changes for
> >> logical replication because of the code size, maintenance overhead, and
> >> testing required.
> > DDL is already captured using the event triggers mechanism (which is
> > what it was invented for in the first place). The only thing we don't
> > have is a hardcoded mechanism to transform it from C struct format to
> > SQL language.
> Since DDL event triggers only cover database-level DDL they miss a lot
> that is very important to auditing, e.g. CREATE/ALTER/DROP ROLE,
> GRANT/REVOKE, CREATE/ALTER/DROP DATABASE, etc.
Well, we need to enhance them then.
> I would like to see a general mechanism that allows event triggers,
> logical replication, and audit to all get the information they need
> without them being tied to each other directly.
I think the reporting of DDL would be produced in a way that could be
used by auditing or logical replication, as I already stated.
+ As you are, so once was I. As I am, so you will be. +
+ Roman grave inscription +
|Next Message||Bruce Momjian||2016-02-19 16:59:53||Re: PostgreSQL Audit Extension|
|Previous Message||Fujii Masao||2016-02-19 16:50:45||Re: 9.5 new setting "cluster name" and logging|