46 #define ACL_ID_PUBLIC 0 66 #define ACLITEM_GET_PRIVS(item) ((item).ai_privs & 0xFFFF) 67 #define ACLITEM_GET_GOPTIONS(item) (((item).ai_privs >> 16) & 0xFFFF) 68 #define ACLITEM_GET_RIGHTS(item) ((item).ai_privs) 70 #define ACL_GRANT_OPTION_FOR(privs) (((AclMode) (privs) & 0xFFFF) << 16) 71 #define ACL_OPTION_TO_PRIVS(privs) (((AclMode) (privs) >> 16) & 0xFFFF) 73 #define ACLITEM_SET_PRIVS(item,privs) \ 74 ((item).ai_privs = ((item).ai_privs & ~((AclMode) 0xFFFF)) | \ 75 ((AclMode) (privs) & 0xFFFF)) 76 #define ACLITEM_SET_GOPTIONS(item,goptions) \ 77 ((item).ai_privs = ((item).ai_privs & ~(((AclMode) 0xFFFF) << 16)) | \ 78 (((AclMode) (goptions) & 0xFFFF) << 16)) 79 #define ACLITEM_SET_RIGHTS(item,rights) \ 80 ((item).ai_privs = (AclMode) (rights)) 82 #define ACLITEM_SET_PRIVS_GOPTIONS(item,privs,goptions) \ 83 ((item).ai_privs = ((AclMode) (privs) & 0xFFFF) | \ 84 (((AclMode) (goptions) & 0xFFFF) << 16)) 87 #define ACLITEM_ALL_PRIV_BITS ((AclMode) 0xFFFF) 88 #define ACLITEM_ALL_GOPTION_BITS ((AclMode) 0xFFFF << 16) 108 #define ACL_NUM(ACL) (ARR_DIMS(ACL)[0]) 109 #define ACL_DAT(ACL) ((AclItem *) ARR_DATA_PTR(ACL)) 110 #define ACL_N_SIZE(N) (ARR_OVERHEAD_NONULLS(1) + ((N) * sizeof(AclItem))) 111 #define ACL_SIZE(ACL) ARR_SIZE(ACL) 116 #define DatumGetAclItemP(X) ((AclItem *) DatumGetPointer(X)) 117 #define PG_GETARG_ACLITEM_P(n) DatumGetAclItemP(PG_GETARG_DATUM(n)) 118 #define PG_RETURN_ACLITEM_P(x) PG_RETURN_POINTER(x) 120 #define DatumGetAclP(X) ((Acl *) PG_DETOAST_DATUM(X)) 121 #define DatumGetAclPCopy(X) ((Acl *) PG_DETOAST_DATUM_COPY(X)) 122 #define PG_GETARG_ACL_P(n) DatumGetAclP(PG_GETARG_DATUM(n)) 123 #define PG_GETARG_ACL_P_COPY(n) DatumGetAclPCopy(PG_GETARG_DATUM(n)) 124 #define PG_RETURN_ACL_P(x) PG_RETURN_POINTER(x) 129 #define ACL_MODECHG_ADD 1 130 #define ACL_MODECHG_DEL 2 131 #define ACL_MODECHG_EQL 3 137 #define ACL_INSERT_CHR 'a' 138 #define ACL_SELECT_CHR 'r' 139 #define ACL_UPDATE_CHR 'w' 140 #define ACL_DELETE_CHR 'd' 141 #define ACL_TRUNCATE_CHR 'D' 142 #define ACL_REFERENCES_CHR 'x' 143 #define ACL_TRIGGER_CHR 't' 144 #define ACL_EXECUTE_CHR 'X' 145 #define ACL_USAGE_CHR 'U' 146 #define ACL_CREATE_CHR 'C' 147 #define ACL_CREATE_TEMP_CHR 'T' 148 #define ACL_CONNECT_CHR 'c' 151 #define ACL_ALL_RIGHTS_STR "arwdDxtXUCTc" 156 #define ACL_ALL_RIGHTS_COLUMN (ACL_INSERT|ACL_SELECT|ACL_UPDATE|ACL_REFERENCES) 157 #define ACL_ALL_RIGHTS_RELATION (ACL_INSERT|ACL_SELECT|ACL_UPDATE|ACL_DELETE|ACL_TRUNCATE|ACL_REFERENCES|ACL_TRIGGER) 158 #define ACL_ALL_RIGHTS_SEQUENCE (ACL_USAGE|ACL_SELECT|ACL_UPDATE) 159 #define ACL_ALL_RIGHTS_DATABASE (ACL_CREATE|ACL_CREATE_TEMP|ACL_CONNECT) 160 #define ACL_ALL_RIGHTS_FDW (ACL_USAGE) 161 #define ACL_ALL_RIGHTS_FOREIGN_SERVER (ACL_USAGE) 162 #define ACL_ALL_RIGHTS_FUNCTION (ACL_EXECUTE) 163 #define ACL_ALL_RIGHTS_LANGUAGE (ACL_USAGE) 164 #define ACL_ALL_RIGHTS_LARGEOBJECT (ACL_SELECT|ACL_UPDATE) 165 #define ACL_ALL_RIGHTS_SCHEMA (ACL_USAGE|ACL_CREATE) 166 #define ACL_ALL_RIGHTS_TABLESPACE (ACL_CREATE) 167 #define ACL_ALL_RIGHTS_TYPE (ACL_USAGE) 221 const Acl *acl,
Oid ownerId,
285 const char *objectname);
288 const char *objectname,
const char *colname);
AclResult pg_class_aclcheck(Oid table_oid, Oid roleid, AclMode mode)
bool pg_opclass_ownercheck(Oid opc_oid, Oid roleid)
static PgChecksumMode mode
void aclitemsort(Acl *acl)
bool pg_oper_ownercheck(Oid oper_oid, Oid roleid)
bool aclequal(const Acl *left_acl, const Acl *right_acl)
bool pg_ts_config_ownercheck(Oid cfg_oid, Oid roleid)
AclResult pg_proc_aclcheck(Oid proc_oid, Oid roleid, AclMode mode)
bool pg_database_ownercheck(Oid db_oid, Oid roleid)
AclMode pg_tablespace_aclmask(Oid spc_oid, Oid roleid, AclMode mask, AclMaskHow how)
AclResult pg_attribute_aclcheck_ext(Oid table_oid, AttrNumber attnum, Oid roleid, AclMode mode, bool *is_missing)
bool pg_language_ownercheck(Oid lan_oid, Oid roleid)
bool pg_publication_ownercheck(Oid pub_oid, Oid roleid)
Acl * aclupdate(const Acl *old_acl, const AclItem *mod_aip, int modechg, Oid ownerId, DropBehavior behavior)
AclMode pg_foreign_server_aclmask(Oid srv_oid, Oid roleid, AclMode mask, AclMaskHow how)
AclMode pg_type_aclmask(Oid type_oid, Oid roleid, AclMode mask, AclMaskHow how)
Acl * aclnewowner(const Acl *old_acl, Oid oldOwnerId, Oid newOwnerId)
AclMode pg_class_aclmask(Oid table_oid, Oid roleid, AclMode mask, AclMaskHow how)
AclResult pg_largeobject_aclcheck_snapshot(Oid lang_oid, Oid roleid, AclMode mode, Snapshot snapshot)
void recordDependencyOnNewAcl(Oid classId, Oid objectId, int32 objsubId, Oid ownerId, Acl *acl)
AclMode pg_attribute_aclmask(Oid table_oid, AttrNumber attnum, Oid roleid, AclMode mask, AclMaskHow how)
AclResult pg_attribute_aclcheck(Oid table_oid, AttrNumber attnum, Oid roleid, AclMode mode)
bool pg_foreign_data_wrapper_ownercheck(Oid srv_oid, Oid roleid)
Oid get_rolespec_oid(const RoleSpec *role, bool missing_ok)
bool pg_statistics_object_ownercheck(Oid stat_oid, Oid roleid)
bool is_member_of_role_nosuper(Oid member, Oid role)
void ExecAlterDefaultPrivilegesStmt(ParseState *pstate, AlterDefaultPrivilegesStmt *stmt)
AclMode pg_foreign_data_wrapper_aclmask(Oid fdw_oid, Oid roleid, AclMode mask, AclMaskHow how)
AclResult pg_foreign_server_aclcheck(Oid srv_oid, Oid roleid, AclMode mode)
bool pg_extension_ownercheck(Oid ext_oid, Oid roleid)
Acl * aclcopy(const Acl *orig_acl)
bool has_createrole_privilege(Oid roleid)
void removeExtObjInitPriv(Oid objoid, Oid classoid)
bool pg_type_ownercheck(Oid type_oid, Oid roleid)
bool pg_tablespace_ownercheck(Oid spc_oid, Oid roleid)
void ExecuteGrantStmt(GrantStmt *stmt)
bool pg_conversion_ownercheck(Oid conv_oid, Oid roleid)
Oid get_role_oid(const char *rolename, bool missing_ok)
void select_best_grantor(Oid roleId, AclMode privileges, const Acl *acl, Oid ownerId, Oid *grantorId, AclMode *grantOptions)
AclResult pg_tablespace_aclcheck(Oid spc_oid, Oid roleid, AclMode mode)
void aclcheck_error(AclResult aclerr, ObjectType objtype, const char *objectname)
AclResult pg_database_aclcheck(Oid db_oid, Oid roleid, AclMode mode)
AclMode pg_namespace_aclmask(Oid nsp_oid, Oid roleid, AclMode mask, AclMaskHow how)
AclMode pg_language_aclmask(Oid lang_oid, Oid roleid, AclMode mask, AclMaskHow how)
AclResult pg_attribute_aclcheck_all(Oid table_oid, Oid roleid, AclMode mode, AclMaskHow how)
int aclmembers(const Acl *acl, Oid **roleids)
AclResult pg_language_aclcheck(Oid lang_oid, Oid roleid, AclMode mode)
AclMode pg_class_aclmask_ext(Oid table_oid, Oid roleid, AclMode mask, AclMaskHow how, bool *is_missing)
bool pg_subscription_ownercheck(Oid sub_oid, Oid roleid)
void aclcheck_error_type(AclResult aclerr, Oid typeOid)
void recordExtObjInitPriv(Oid objoid, Oid classoid)
AclMode pg_database_aclmask(Oid db_oid, Oid roleid, AclMode mask, AclMaskHow how)
bool pg_collation_ownercheck(Oid coll_oid, Oid roleid)
AclResult pg_namespace_aclcheck(Oid nsp_oid, Oid roleid, AclMode mode)
Acl * get_user_default_acl(ObjectType objtype, Oid ownerId, Oid nsp_oid)
AclMode aclmask(const Acl *acl, Oid roleid, Oid ownerId, AclMode mask, AclMaskHow how)
bool is_admin_of_role(Oid member, Oid role)
bool pg_event_trigger_ownercheck(Oid et_oid, Oid roleid)
AclMode pg_attribute_aclmask_ext(Oid table_oid, AttrNumber attnum, Oid roleid, AclMode mask, AclMaskHow how, bool *is_missing)
AclResult pg_foreign_data_wrapper_aclcheck(Oid fdw_oid, Oid roleid, AclMode mode)
bool pg_foreign_server_ownercheck(Oid srv_oid, Oid roleid)
void initialize_acl(void)
AclResult pg_type_aclcheck(Oid type_oid, Oid roleid, AclMode mode)
AclMode pg_proc_aclmask(Oid proc_oid, Oid roleid, AclMode mask, AclMaskHow how)
AclMode pg_largeobject_aclmask_snapshot(Oid lobj_oid, Oid roleid, AclMode mask, AclMaskHow how, Snapshot snapshot)
bool pg_ts_dict_ownercheck(Oid dict_oid, Oid roleid)
bool pg_opfamily_ownercheck(Oid opf_oid, Oid roleid)
char * get_rolespec_name(const RoleSpec *role)
void RemoveRoleFromObjectACL(Oid roleid, Oid classid, Oid objid)
void aclcheck_error_col(AclResult aclerr, ObjectType objtype, const char *objectname, const char *colname)
Oid get_role_oid_or_public(const char *rolename)
bool pg_proc_ownercheck(Oid proc_oid, Oid roleid)
bool has_bypassrls_privilege(Oid roleid)
void check_rolespec_name(const RoleSpec *role, const char *detail_msg)
Acl * make_empty_acl(void)
bool pg_class_ownercheck(Oid class_oid, Oid roleid)
bool is_member_of_role(Oid member, Oid role)
Acl * aclmerge(const Acl *left_acl, const Acl *right_acl, Oid ownerId)
void check_is_member_of_role(Oid member, Oid role)
AclResult pg_class_aclcheck_ext(Oid table_oid, Oid roleid, AclMode mode, bool *is_missing)
bool has_privs_of_role(Oid member, Oid role)
HeapTuple get_rolespec_tuple(const RoleSpec *role)
bool pg_largeobject_ownercheck(Oid lobj_oid, Oid roleid)
bool pg_namespace_ownercheck(Oid nsp_oid, Oid roleid)
Acl * aclconcat(const Acl *left_acl, const Acl *right_acl)
Acl * acldefault(ObjectType objtype, Oid ownerId)