Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Include security labels header #1189

Merged
merged 1 commit into from
Jul 6, 2023
Merged

Include security labels header #1189

merged 1 commit into from
Jul 6, 2023

Conversation

daamien
Copy link
Contributor

@daamien daamien commented Jul 5, 2023 •
edited
Loading

Closes #1187

@workingjubilee workingjubilee changed the title Add security labels related api Include security labels header Jul 5, 2023
@workingjubilee
Copy link
Member

Out of curiosity, what sort of uses do you intend to put this to? All the functions in these headers will remain unsafe to use.

@eeeebbbbrrrr
Copy link
Contributor

It's missing a similar change to pg16.h. I wonder if this was originally created from master even tho the target here is develop?

@daamien
Copy link
Contributor Author

daamien commented Jul 6, 2023 •
edited
Loading

Hi !

@workingjubilee I'm working on an extension called PostgreSQL Anonymizer where I need to register several Security Label Providers which allow users to define a masking policy. A masking policy is composed of masking rules and each masking rule is a sort of "rewrite rule" expressed using a security label on a given column like this:

SECURITY LABEL FOR anon ON COLUMN player.name
IS 'MASKED WITH FUNCTION anon.fake_last_name()';

The security label providers are created using register_label_provider during by the _PG_init function

https://gitlab.com/dalibo/postgresql_anonymizer/-/blob/master/anon.c#L420

Then the masking rules are read using GetSecurityLabel.

As we're considering moving toward Rust, I'm trying to build a prototype with pgrx

@eeeebbbbrrrr I'm not sure what happened, but I just rebased my PR from tcdi:develop.

@eeeebbbbrrrr
Copy link
Contributor

Thanks @daamien. Welcome to the contributors club! This will be in our next release, which I hope will be very soon.

@eeeebbbbrrrr eeeebbbbrrrr merged commit 8b7e20b into pgcentralfoundation:develop Jul 6, 2023
@daamien
Copy link
Contributor Author

daamien commented Jul 7, 2023

thanks a lot !

@eeeebbbbrrrr eeeebbbbrrrr mentioned this pull request Jul 8, 2023
Merged
@eeeebbbbrrrr eeeebbbbrrrr mentioned this pull request Sep 5, 2023
Merged
eeeebbbbrrrr added a commit that referenced this pull request Sep 5, 2023
@eeeebbbbrrrr
Update version to 0.10.0 (#1280)
3d1c8e3 
This is the final release of v0.10.0. Thanks everyone for the beta
testing, pull requests, issues, and patience.

As always, install `cargo-pgrx` with `cargo install cargo-pgrx --locked`
and update your extension Cargo.toml files to use the `0.10.0` pgrx
dependencies.

This release includes support for Postgres 16RC1. Support for the
previous betas has been removed. As such, a fresh `cargo pgrx init` is
required.

## What's Changed Since v0.10.0-beta.4

* Fix `GetMemoryChunkContext` port by @workingjubilee in
#1273
* Better error messages when `pg_config` isn't found. by @eeeebbbbrrrr
in #1271
* Make `PostgresHash` also need `Eq` by @workingjubilee in
#1264
* Memoize git hash and extension metadata by @levkk in
#1274
* move to pg16rc1 by @eeeebbbbrrrr in
#1276
* Fix bgworker template up to 0.10.0-beta.4 by @workingjubilee in
#1270

## New Contributors
* @levkk made their first contribution in
#1274

**Changelog**:
v0.10.0-beta.4...v0.10.0

---

v0.10.0's full set of changes throughout the entire beta period are:

* Postgres 16beta1 Support by @eeeebbbbrrrr in
#1169
* Support building against macOS universal binaries by @clowder in
#1166
* list specific versions in feature gates by @eeeebbbbrrrr in
#1175
* Fix bug with converting a `pg_sys::Datum` into a `pgrx::Date` by
@eeeebbbbrrrr in #1177
* Fix Arrays with leading nulls by @eeeebbbbrrrr in
#1180
* Disable hello_versioned_so test by @workingjubilee in
#1192
* doc: fix link broken by @yihong0618 in
#1181
* fcinfo: fix incorrect length set in unsafe code by @Sasasu in
#1190
* update to pg16beta2 support by @eeeebbbbrrrr in
#1188
* Array-walking is aligned by @workingjubilee in
#1191
* Implement PGRXSharedMemory for Deque by @feikesteenbergen in
#1170
* Include security labels header by @daamien in
#1189
* Fixes macos-11 tests by @BradyBonnette in
#1197
* Pgcentralfoundation updates again by @eeeebbbbrrrr in
#1200
* Update version to 0.10.0-beta.0 by @eeeebbbbrrrr in
#1201
* Testing help by @eeeebbbbrrrr in
#1203
* Type testability cleanup by @eeeebbbbrrrr in
#1204
* Try to smartly propagate fs errors by @workingjubilee in
#1186
* Fix issue #1209 by @eeeebbbbrrrr in
#1210
* Type roundtrip tests by @eeeebbbbrrrr in
#1185
* Update version to 0.10.0-beta.1 by @eeeebbbbrrrr in
#1213
* Add a workaround for the pg16/homebrew/icu4c situation by @thomcc in
#1206
* Add security policy by @johnrballard in
#1207
* `AnyNumeric` is no longer backed by Postgres-allocated memory by
@eeeebbbbrrrr in #1216
* Modularize pgrx::spi by @workingjubilee in
#1219
* Stop SpiClient soundness from regressing by @workingjubilee in
#1214
* Add foreign table headers by @workingjubilee in
#1226
* Modularize the interior of pgrx-pg-sys by @workingjubilee in
#1227
* Initial valgrind support by @thomcc in
#1218
* Add support for handling SIGINT and SIGCHLD from bgworker by @JelteF
in #1229
* Ignores UI tests for MUSL environments by @BradyBonnette in
#1235
* Add a env flag that can be set to skip `#[pg_test]`-generated tests.
by @thomcc in #1239
* Fix issue #1076: Properly handle dependency graph of `Result<T, _>` by
@eeeebbbbrrrr in #1241
* Cleanup the error when cargo-pgrx version doesn't match Cargo.toml by
@eeeebbbbrrrr in #1240
* Add operator and cache related api by @VoVAllen in
#1242
* Addresses cargo-pgrx error reporting by @BradyBonnette in
#1238
* Update version to 0.10.0-beta.2 by @eeeebbbbrrrr in
#1244
* Bump cargo-metadata and clap-cargo by @thomcc in
#1246
* Derive Clone for Inet by @JelteF in
#1251
* Correct docs for datetime `From` impls by @workingjubilee in
#1253
* Only enable line tables for profile.dev by @thomcc in
#1249
* Remove references to master branch by @thomcc in
#1243
* Ensure bindgen gets all the `cppflags` it needs (on macOS, anyway) by
@thomcc in #1247
* update for pg16beta3 support by @eeeebbbbrrrr in
#1254
* Update version to 0.10.0-beta.3 by @eeeebbbbrrrr in
#1255
* Add proptest support by @workingjubilee in
#1258
* Misc reformatting and typo fixes by @workingjubilee in
#1260
* spi: simplify (optimize?) Datum preparation by @vrmiguel in
#1256
* Assume commutation when deriving PostgresEq by @workingjubilee in
#1261
* Demand Ord for PostgresOrd by @workingjubilee in
#1262
* Fix pgrx install causing postgresql coredump by @Sasasu in
#1263
* Update version to 0.10.0-beta.4 by @workingjubilee in
#1267

## New Contributors
* @clowder made their first contribution in
#1166
* @yihong0618 made their first contribution in
#1181
* @Sasasu made their first contribution in
#1190
* @daamien made their first contribution in
#1189
* @johnrballard made their first contribution in
#1207
* @VoVAllen made their first contribution in
#1242
* @vrmiguel made their first contribution in
#1256


**Full Changelog**:
v0.9.8...v0.10.0
@bayandin bayandin mentioned this pull request Sep 6, 2023
Closed
daamien added a commit to daamien/pgrx that referenced this pull request Jul 22, 2024
@daamien
Include pg_seclabel catalog
f418b55 
In complement to pgcentralfoundation#1189, add the `catalog/pg_seclabel.h` header
in order to access the `FormData_pg_seclabel` struct and
provide a mecanism to list the security labels.
@daamien daamien mentioned this pull request Jul 22, 2024
Merged
workingjubilee pushed a commit that referenced this pull request Jul 23, 2024
@daamien
Include pg_seclabel catalog (#1787)
42cefd2 
In complement to #1189, add the `catalog/pg_seclabel.h` header in order
to access the `FormData_pg_seclabel` struct and provide a mecanism to
list the security labels.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@eeeebbbbrrrr eeeebbbbrrrr eeeebbbbrrrr approved these changes

Assignees
No one assigned
Labels
#include
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Add support for Security Labels ?
3 participants
@daamien @workingjubilee @eeeebbbbrrrr