Re: One question about security label command

From: Kouhei Kaigai <kaigai(at)ak(dot)jp(dot)nec(dot)com>
To: 张元超 <zhangyuanchao(at)highgo(dot)com>
Cc: "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: One question about security label command
Date: 2015-03-03 10:01:03
Message-ID: 9A28C8860F777E439AA12E8AEA7694F8010BAC02@BPXM15GP.gisp.nec.co.jp
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Are you trying with sepgsql.so module?

From standpoint of SQL syntax, yep, SECURITY LABEL command support
the object types below, however, it fully depends on security label
provider; sepgsql.so in this case.
At this moment, it supports database, schema, function, tables and
column are supported by sepgsql. So, it is expected behavior.

Thanks,
--
NEC OSS Promotion Center / PG-Strom Project
KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>

> -----Original Message-----
> From: pgsql-hackers-owner(at)postgresql(dot)org
> [mailto:pgsql-hackers-owner(at)postgresql(dot)org] On Behalf Of ?元超
> Sent: Tuesday, March 03, 2015 6:33 PM
> To: pgsql-hackers(at)postgresql(dot)org
> Subject: [HACKERS] One question about security label command
>
> Greetings,
> I got a problem when i used the 'security label on role ...' command to make
> a label for a database role.
> It show me an error like "ERROR: unsupported object type: 1260".So i read the
> document about 'security label' command ,it show me like this:
>
> SECURITY LABEL [ FOR provider ] ON
> {
> TABLE object_name |
> COLUMN table_name.column_name |
> AGGREGATE aggregate_name ( aggregate_signature ) |
> DATABASE object_name |
> DOMAIN object_name |
> EVENT TRIGGER object_name |
> FOREIGN TABLE object_name
> FUNCTION function_name ( [ [ argmode ] [ argname ] argtype [, ...] ] ) |
> LARGE OBJECT large_object_oid |
> MATERIALIZED VIEW object_name |
> [ PROCEDURAL ] LANGUAGE object_name |
> ROLE object_name |
> SCHEMA object_name |
> SEQUENCE object_name |
> TABLESPACE object_name |
> TYPE object_name |
> VIEW object_name
> } IS 'label'
>
> where aggregate_signature is:
>
> * |
> [ argmode ] [ argname ] argtype [ , ... ] |
> [ [ argmode ] [ argname ] argtype [ , ... ] ] ORDER BY [ argmode ] [ argname ]
> argtype [ , ... ]
> The document show that it can support the object_name named role,so i want to
> ask what lead to the problem.Thanks.
>
>
>
>
>

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Shigeru Hanada 2015-03-03 10:07:44 Re: Join push-down support for foreign tables
Previous Message Jeremy Harris 2015-03-03 10:00:37 Re: Abbreviated keys for text cost model fix