Recently, I ran into a problem, InvokeObjectPostAlterHook was implemented for 
sepgsql,
sepgsql use it to determine whether to check permissions during certain 
operations.
But InvokeObjectPostAlterHook doesn't handle all of the alter's behavior, at 
least the table is not controlled. e.g., ALTER TABLE... ENABLE/DISABLE ROW 
LEVEL SECURITY,ALTER TABLE ... DISABLE TRIGGER, GRANT and REVOKE and so on.
Whether InvokeObjectPostAlterHook is not fully controlled? it's a bug?




发自我的iPhone

Reply via email to