row_security_policy_hook_restrictive

Description

row_security_policy_hook_restrictive: core extension hook declared in src/include/rewrite/rowsecurity.h. The exact interface and call sites are recorded below.

Interface type

row_security_policy_hook_type

Header

src/include/rewrite/rowsecurity.h

Subsystem

Permissions and object access

Initial value

NULL (no hook installed)

C interface

typedef List *(*row_security_policy_hook_type) (CmdType cmdtype, Relation relation);
extern PGDLLIMPORT row_security_policy_hook_type row_security_policy_hook_restrictive;

Call sites

src/backend/rewrite/rowsecurity.c:622

Core call context: src/backend/rewrite/rowsecurity.c:616–630

	 * These are simply appended to the lists of internal policies, if they
	 * apply to the specified role.
	 */
	if (row_security_policy_hook_restrictive)
	{
		List	   *hook_policies =
			(*row_security_policy_hook_restrictive) (cmd, relation);

		/*
		 * As with built-in restrictive policies, we sort any hook-provided
		 * restrictive policies by name also.  Note that we also intentionally
		 * always check all built-in restrictive policies, in name order,
		 * before checking restrictive policies added by hooks, in name order.
		 */
		sort_policies_by_name(hook_policies);

Related entries

• Row Security Policies

Documentation and source

• Interface declaration
• Core definition
• Call sites

Related entries

• ExecutorCheckPerms_hookExecutorCheckPerms_hook
• object_access_hookobject_access_hook
• object_access_hook_strobject_access_hook_str
• row_security_policy_hook_permissiverow_security_policy_hook_permissive