Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Skip to content

Commit 11523e8

Browse files
committed
Support new default roles with adminpack
This provides a newer version of adminpack which works with the newly added default roles to support GRANT'ing to non-superusers access to read and write files, along with related functions (unlinking files, getting file length, renaming/removing files, scanning the log file directory) which are supported through adminpack. Note that new versions of the functions are required because an environment might have an updated version of the library but still have the old adminpack 1.0 catalog definitions (where EXECUTE is GRANT'd to PUBLIC for the functions). This patch also removes the long-deprecated alternative names for functions that adminpack used to include and which are now included in the backend, in adminpack v1.1. Applications using the deprecated names should be updated to use the backend functions instead. Existing installations which continue to use adminpack v1.0 should continue to function until/unless adminpack is upgraded. Reviewed-By: Michael Paquier Discussion: https://postgr.es/m/20171231191939.GR2416%40tamriel.snowman.net
1 parent 0fdc849 commit 11523e8

File tree

10 files changed

+388
-88
lines changed

10 files changed

+388
-88
lines changed

contrib/adminpack/Makefile

+1-1
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ OBJS = adminpack.o $(WIN32RES)
55
PG_CPPFLAGS = -I$(libpq_srcdir)
66

77
EXTENSION = adminpack
8-
DATA = adminpack--1.0.sql
8+
DATA = adminpack--1.0.sql adminpack--1.0--1.1.sql
99
PGFILEDESC = "adminpack - support functions for pgAdmin"
1010

1111
REGRESS = adminpack
+51
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,51 @@
1+
/* contrib/adminpack/adminpack--1.0--1.1.sql */
2+
3+
-- complain if script is sourced in psql, rather than via ALTER EXTENSION
4+
\echo Use "ALTER EXTENSION adminpack UPDATE TO '1.1'" to load this file. \quit
5+
6+
/* ***********************************************
7+
* Administrative functions for PostgreSQL
8+
* *********************************************** */
9+
10+
/* generic file access functions */
11+
12+
CREATE OR REPLACE FUNCTION pg_catalog.pg_file_write(text, text, bool)
13+
RETURNS bigint
14+
AS 'MODULE_PATHNAME', 'pg_file_write_v1_1'
15+
LANGUAGE C VOLATILE STRICT;
16+
17+
REVOKE EXECUTE ON FUNCTION pg_catalog.pg_file_write(text, text, bool) FROM PUBLIC;
18+
19+
CREATE OR REPLACE FUNCTION pg_catalog.pg_file_rename(text, text, text)
20+
RETURNS bool
21+
AS 'MODULE_PATHNAME', 'pg_file_rename_v1_1'
22+
LANGUAGE C VOLATILE;
23+
24+
REVOKE EXECUTE ON FUNCTION pg_catalog.pg_file_rename(text, text, text) FROM PUBLIC;
25+
26+
CREATE OR REPLACE FUNCTION pg_catalog.pg_file_rename(text, text)
27+
RETURNS bool
28+
AS 'SELECT pg_catalog.pg_file_rename($1, $2, NULL::pg_catalog.text);'
29+
LANGUAGE SQL VOLATILE STRICT;
30+
31+
CREATE OR REPLACE FUNCTION pg_catalog.pg_file_unlink(text)
32+
RETURNS bool
33+
AS 'MODULE_PATHNAME', 'pg_file_unlink_v1_1'
34+
LANGUAGE C VOLATILE STRICT;
35+
36+
REVOKE EXECUTE ON FUNCTION pg_catalog.pg_file_unlink(text) FROM PUBLIC;
37+
38+
CREATE OR REPLACE FUNCTION pg_catalog.pg_logdir_ls()
39+
RETURNS setof record
40+
AS 'MODULE_PATHNAME', 'pg_logdir_ls_v1_1'
41+
LANGUAGE C VOLATILE STRICT;
42+
43+
REVOKE EXECUTE ON FUNCTION pg_catalog.pg_logdir_ls() FROM PUBLIC;
44+
45+
/* These functions are now in the backend and callers should update to use those */
46+
47+
DROP FUNCTION pg_file_read(text, bigint, bigint);
48+
49+
DROP FUNCTION pg_file_length(text);
50+
51+
DROP FUNCTION pg_logfile_rotate();

0 commit comments

Comments
 (0)