row_security_policy_hook_permissive

中文定义与说明

这些钩子允许扩展添加自己的安全策略。row_security_policy_hook_permissive 添加的策略通过 OR 与其他宽松策略组合；row_security_policy_hook_restrictive 添加的策略始终必须满足，通过 AND 与其他策略组合。

以下中文为本站依据所列 PostgreSQL 源码注释编译的说明。

接口声明

typedef List *(*row_security_policy_hook_type) (CmdType cmdtype, Relation relation);
extern PGDLLIMPORT row_security_policy_hook_type row_security_policy_hook_permissive;

调用位置

• src/backend/rewrite/rowsecurity.c:644

核心调用上下文：src/backend/rewrite/rowsecurity.c:638–652

		}
	}

	if (row_security_policy_hook_permissive)
	{
		List	   *hook_policies =
			(*row_security_policy_hook_permissive) (cmd, relation);

		foreach(item, hook_policies)
		{
			RowSecurityPolicy *policy = (RowSecurityPolicy *) lfirst(item);

			if (check_role_for_policy(policy->roles, user_id))
				*permissive_policies = lappend(*permissive_policies, policy);
		}