<row>

<entry><link linkend="catalog-pg-init-privs"><structname>pg_init_privs</structname></link></entry>

<entry>object initial privileges</entry>

</row>

<sect1 id="catalog-pg-init-privs">

<title><structname>pg_init_privs</structname></title>

<indexterm zone="catalog-pg-init-privs">

<primary>pg_init_privs</primary>

</indexterm>

<para>

The catalog <structname>pg_init_privs</> records information about

the initial privileges of objects in the system. There is one entry

for each object in the database which has a non-default (non-NULL)

initial set of privileges.

</para>

<para>

Objects can have initial privileges either by having those privileges set

when the system is initialized (by <application>initdb</>) or when the

object is created during a <command>CREATE EXTENSION</command> and the

extension script sets initial privileges using the <command>GRANT</command>

system. Note that the system will automatically handle recording of the

privileges during the extension script and that extension authors need

only use the <command>GRANT</command> and <command>REVOKE</command>

statements in their script to have the privileges recorded. The

<literal>privtype</literal> column indicates if the initial privilege was

set by <application>initdb</> or during a

<command>CREATE EXTENSION</command> command.

</para>

<para>

Objects which have initial privileges set by <application>initdb</> will

have entries where <literal>privtype</literal> is

<literal>'i'</literal>, while objects which have initial privileges set

by <command>CREATE EXTENSION</command> will have entries where

<literal>privtype</literal> is <literal>'e'</literal>.

</para>

<table>

<title><structname>pg_inherits</> Columns</title>

<tgroup cols="4">

<thead>

<row>

<entry>Name</entry>

<entry>Type</entry>

<entry>References</entry>

<entry>Description</entry>

</row>

</thead>

<tbody>

<row>

<entry><structfield>objoid</structfield></entry>

<entry><type>oid</type></entry>

<entry>any OID column</entry>

<entry>The OID of the specific object</entry>

</row>

<row>

<entry><structfield>classoid</structfield></entry>

<entry><type>oid</type></entry>

<entry><literal><link linkend="catalog-pg-class"><structname>pg_class</structname></link>.oid</literal></entry>

<entry>The OID of the system catalog the object is in</entry>

</row>

<row>

<entry><structfield>objsubid</structfield></entry>

<entry><type>int4</type></entry>

<entry></entry>

<entry>

For a table column, this is the column number (the

<structfield>objoid</> and <structfield>classoid</> refer to the

table itself). For all other object types, this column is

zero.

</entry>

</row>

<row>

<entry><structfield>privtype</structfield></entry>

<entry><type>char</type></entry>

<entry></entry>

<entry>

A code defining the type of initial privilege of this object; see text

</entry>

</row>

<row>

<entry><structfield>initprivs</structfield></entry>

<entry><type>aclitem[]</type></entry>

<entry></entry>

<entry>

The initial access privileges; see

<xref linkend="sql-grant"> and

<xref linkend="sql-revoke">

for details

</entry>

</row>

</tbody>

</tgroup>

</table>

</sect1>

#include "catalog/pg_init_privs.h"

#include "commands/extension.h"

static void recordExtensionInitPriv(Oid objoid, Oid classoid, int objsubid,

Acl *new_acl);

/* Update initial privileges for extensions */

recordExtensionInitPriv(relOid, RelationRelationId, attnum,

ACL_NUM(new_acl) > 0 ? new_acl : NULL);

/* Update initial privileges for extensions */

recordExtensionInitPriv(relOid, RelationRelationId, 0, new_acl);

/* Update initial privileges for extensions */

recordExtensionInitPriv(fdwid, ForeignDataWrapperRelationId, 0,

new_acl);

/* Update initial privileges for extensions */

recordExtensionInitPriv(srvid, ForeignServerRelationId, 0, new_acl);

/* Update initial privileges for extensions */

recordExtensionInitPriv(funcId, ProcedureRelationId, 0, new_acl);

/* Update initial privileges for extensions */

recordExtensionInitPriv(langId, LanguageRelationId, 0, new_acl);

/* Update initial privileges for extensions */

recordExtensionInitPriv(loid, LargeObjectRelationId, 0, new_acl);

/* Update initial privileges for extensions */

recordExtensionInitPriv(nspid, NamespaceRelationId, 0, new_acl);

/* Update initial privileges for extensions */

recordExtensionInitPriv(typId, TypeRelationId, 0, new_acl);

static void

recordExtensionInitPriv(Oid objoid, Oid classoid, int objsubid, Acl *new_acl)

{

Relation relation;

ScanKeyData key[3];

SysScanDesc scan;

HeapTuple tuple;

HeapTuple oldtuple;

if (!creating_extension)

return;

relation = heap_open(InitPrivsRelationId, RowExclusiveLock);

ScanKeyInit(&key[0],

Anum_pg_init_privs_objoid,

BTEqualStrategyNumber, F_OIDEQ,

ObjectIdGetDatum(objoid));

ScanKeyInit(&key[1],

Anum_pg_init_privs_classoid,

BTEqualStrategyNumber, F_OIDEQ,

ObjectIdGetDatum(classoid));

ScanKeyInit(&key[2],

Anum_pg_init_privs_objsubid,

BTEqualStrategyNumber, F_INT4EQ,

Int32GetDatum(objsubid));

scan = systable_beginscan(relation, InitPrivsObjIndexId, true,

NULL, 3, key);

/* There should exist only one entry or none. */

oldtuple = systable_getnext(scan);

systable_endscan(scan);

/* If we find an entry, update it with the latest ACL. */

if (HeapTupleIsValid(oldtuple))

{

Datum values[Natts_pg_init_privs];

bool nulls[Natts_pg_init_privs];

bool replace[Natts_pg_init_privs];

/* If we have a new ACL to set, then update the row with it. */

if (new_acl)

{

MemSet(values, 0, sizeof(values));

MemSet(nulls, false, sizeof(nulls));

MemSet(replace, false, sizeof(replace));

values[Anum_pg_init_privs_privs - 1] = PointerGetDatum(new_acl);

replace[Anum_pg_init_privs_privs - 1] = true;

oldtuple = heap_modify_tuple(oldtuple, RelationGetDescr(relation),

values, nulls, replace);

simple_heap_update(relation, &oldtuple->t_self, oldtuple);

/* keep the catalog indexes up to date */

CatalogUpdateIndexes(relation, oldtuple);

}

else

/* new_acl is NULL, so delete the entry we found. */

simple_heap_delete(relation, &oldtuple->t_self);

}

else

{

/* No entry found, so add it. */

Datum values[Natts_pg_init_privs];

bool nulls[Natts_pg_init_privs];

MemSet(nulls, false, sizeof(nulls));

values[Anum_pg_init_privs_objoid - 1] = ObjectIdGetDatum(objoid);

values[Anum_pg_init_privs_classoid - 1] = ObjectIdGetDatum(classoid);

values[Anum_pg_init_privs_objsubid - 1] = Int32GetDatum(objsubid);

/* This function only handles initial privileges of extensions */

values[Anum_pg_init_privs_privtype - 1] =

CharGetDatum(INITPRIVS_EXTENSION);

values[Anum_pg_init_privs_privs - 1] = PointerGetDatum(new_acl);

tuple = heap_form_tuple(RelationGetDescr(relation), values, nulls);

simple_heap_insert(relation, tuple);

/* keep the catalog indexes up to date */

CatalogUpdateIndexes(relation, tuple);

}

/* prevent error when processing objects multiple times */

CommandCounterIncrement();

heap_close(relation, RowExclusiveLock);

}