bfwl2021
/
openGauss-server
forked from huawei/openGauss-server
0
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
openGauss-server/src/gausskernel/optimizer/commands/variable.cpp

987 lines
32 KiB
C++
Executable File
Raw Blame History

/* -------------------------------------------------------------------------
*
* variable.cpp
* Routines for handling specialized SET variables.
*
*
* Portions Copyright (c) 2020 Huawei Technologies Co.,Ltd.
* Portions Copyright (c) 1996-2012, PostgreSQL Global Development Group
* Portions Copyright (c) 1994, Regents of the University of California
*
*
* IDENTIFICATION
* src/gausskernel/optimizer/commands/variable.cpp
*
* -------------------------------------------------------------------------
*/
#include "postgres.h"
#include "knl/knl_variable.h"
#include <ctype.h>
#include "access/parallel.h"
#include "access/xact.h"
#include "access/xlog.h"
#include "catalog/pg_authid.h"
#include "commands/variable.h"
#include "miscadmin.h"
#include "utils/acl.h"
#include "utils/builtins.h"
#include "utils/syscache.h"
#include "utils/snapmgr.h"
#include "utils/timestamp.h"
#include "mb/pg_wchar.h"
/*
* DATESTYLE
*/
/*
* check_datestyle: GUC check_hook for datestyle
*/
bool check_datestyle(char** newval, void** extra, GucSource source)
{
int newDateStyle = u_sess->time_cxt.DateStyle;
int newDateOrder = u_sess->time_cxt.DateOrder;
bool have_style = false;
bool have_order = false;
bool ok = true;
char* rawstring = NULL;
int* myextra = NULL;
char* result = NULL;
List* elemlist = NIL;
ListCell* l = NULL;
const int POSTGRES_LEN = 8;
const int EURO_LEN = 4;
const int NONEURO_LEN = 7;
/* Need a modifiable copy of string */
rawstring = pstrdup(*newval);
/* Parse string into list of identifiers */
if (!SplitIdentifierString(rawstring, ',', &elemlist)) {
/* syntax error in list */
GUC_check_errdetail("List syntax is invalid.");
pfree(rawstring);
list_free_ext(elemlist);
return false;
}
foreach (l, elemlist) {
char* tok = (char*)lfirst(l);
/* Ugh. Somebody ought to write a table driven version -- mjl */
if (pg_strcasecmp(tok, "ISO") == 0) {
if (have_style && newDateStyle != USE_ISO_DATES)
ok = false; /* conflicting styles */
newDateStyle = USE_ISO_DATES;
have_style = true;
} else if (pg_strcasecmp(tok, "SQL") == 0) {
if (have_style && newDateStyle != USE_SQL_DATES)
ok = false; /* conflicting styles */
newDateStyle = USE_SQL_DATES;
have_style = true;
} else if (pg_strncasecmp(tok, "POSTGRES", POSTGRES_LEN) == 0) {
if (have_style && newDateStyle != USE_POSTGRES_DATES)
ok = false; /* conflicting styles */
newDateStyle = USE_POSTGRES_DATES;
have_style = true;
} else if (pg_strcasecmp(tok, "GERMAN") == 0) {
if (have_style && newDateStyle != USE_GERMAN_DATES)
ok = false; /* conflicting styles */
newDateStyle = USE_GERMAN_DATES;
have_style = true;
/* GERMAN also sets DMY, unless explicitly overridden */
if (!have_order)
newDateOrder = DATEORDER_DMY;
} else if (pg_strcasecmp(tok, "YMD") == 0) {
if (have_order && newDateOrder != DATEORDER_YMD)
ok = false; /* conflicting orders */
newDateOrder = DATEORDER_YMD;
have_order = true;
} else if (pg_strcasecmp(tok, "DMY") == 0 || pg_strncasecmp(tok, "EURO", EURO_LEN) == 0) {
if (have_order && newDateOrder != DATEORDER_DMY)
ok = false; /* conflicting orders */
newDateOrder = DATEORDER_DMY;
have_order = true;
} else if (pg_strcasecmp(tok, "MDY") == 0 || pg_strcasecmp(tok, "US") == 0 ||
pg_strncasecmp(tok, "NONEURO", NONEURO_LEN) == 0) {
if (have_order && newDateOrder != DATEORDER_MDY)
ok = false; /* conflicting orders */
newDateOrder = DATEORDER_MDY;
have_order = true;
} else if (pg_strcasecmp(tok, "DEFAULT") == 0) {
/*
* Easiest way to get the current DEFAULT state is to fetch the
* DEFAULT string from guc.c and recursively parse it.
*
* We can't simply "return check_datestyle(...)" because we need
* to handle constructs like "DEFAULT, ISO".
*/
char* subval = NULL;
void* subextra = NULL;
const char* datastyle = NULL;
datastyle = GetConfigOptionResetString("datestyle");
subval = MemoryContextStrdup(u_sess->top_mem_cxt, datastyle);
if (subval == NULL) {
ok = false;
break;
}
if (!check_datestyle(&subval, &subextra, source)) {
pfree(subval);
ok = false;
break;
}
myextra = (int*)subextra;
if (!have_style)
newDateStyle = myextra[0];
if (!have_order)
newDateOrder = myextra[1];
pfree(subval);
pfree(subextra);
} else {
GUC_check_errdetail("Unrecognized key word: \"%s\".", tok);
pfree(rawstring);
list_free_ext(elemlist);
return false;
}
}
pfree(rawstring);
list_free_ext(elemlist);
if (!ok) {
GUC_check_errdetail("Conflicting \"datestyle\" specifications.");
return false;
}
/*
* Prepare the canonical string to return. GUC wants it malloc'd.
*/
errno_t rc = 0;
const uint32 result_len = 32;
result = (char*)MemoryContextAlloc(u_sess->top_mem_cxt, result_len);
if (result == NULL)
return false;
switch (newDateStyle) {
case USE_ISO_DATES:
rc = strcpy_s(result, result_len, "ISO");
securec_check(rc, "\0", "\0");
break;
case USE_SQL_DATES:
rc = strcpy_s(result, result_len, "SQL");
securec_check(rc, "\0", "\0");
break;
case USE_GERMAN_DATES:
rc = strcpy_s(result, result_len, "German");
securec_check(rc, "\0", "\0");
break;
default:
rc = strcpy_s(result, result_len, "Postgres");
securec_check(rc, "\0", "\0");
break;
}
switch (newDateOrder) {
case DATEORDER_YMD:
rc = strcat_s(result, result_len, ", YMD");
securec_check(rc, "\0", "\0");
break;
case DATEORDER_DMY:
rc = strcat_s(result, result_len, ", DMY");
securec_check(rc, "\0", "\0");
break;
default:
rc = strcat_s(result, result_len, ", MDY");
securec_check(rc, "\0", "\0");
break;
}
pfree(*newval);
*newval = result;
/*
* Set up the "extra" struct actually used by assign_datestyle.
*/
myextra = (int*)MemoryContextAlloc(u_sess->top_mem_cxt, 2 * sizeof(int));
if (myextra == NULL)
return false;
myextra[0] = newDateStyle;
myextra[1] = newDateOrder;
*extra = (void*)myextra;
return true;
}
/*
* assign_datestyle: GUC assign_hook for datestyle
*/
void assign_datestyle(const char* newval, void* extra)
{
int* myextra = (int*)extra;
u_sess->time_cxt.DateStyle = myextra[0];
u_sess->time_cxt.DateOrder = myextra[1];
}
/*
* TIMEZONE
*/
typedef struct {
pg_tz* session_timezone;
int CTimeZone;
bool HasCTZSet;
} timezone_extra;
/*
* check_timezone: GUC check_hook for timezone
*/
bool check_timezone(char** newval, void** extra, GucSource source)
{
timezone_extra myextra;
char* endptr = NULL;
double hours;
const int interval_len = 8;
const int top_mem_cxt_size = 64;
/*
* Initialize the "extra" struct that will be passed to assign_timezone.
* We don't want to change any of the three global variables except as
* specified by logic below. To avoid leaking memory during failure
* returns, we set up the struct contents in a local variable, and only
* copy it to *extra at the end.
*/
myextra.session_timezone = session_timezone;
myextra.CTimeZone = u_sess->time_cxt.CTimeZone;
myextra.HasCTZSet = u_sess->time_cxt.HasCTZSet;
if (pg_strncasecmp(*newval, "interval", interval_len) == 0) {
/*
* Support INTERVAL 'foo'. This is for SQL spec compliance, not
* because it has any actual real-world usefulness.
*/
const char* valueptr = *newval;
char* val = NULL;
Interval* interval = NULL;
valueptr += interval_len;
while (isspace((unsigned char)*valueptr))
valueptr++;
if (*valueptr++ != '\'') {
return false;
}
val = pstrdup(valueptr);
/* Check and remove trailing quote */
endptr = strchr(val, '\'');
if (endptr == NULL || endptr[1] != '\0') {
pfree(val);
return false;
}
*endptr = '\0';
/*
* Try to parse it. XXX an invalid interval format will result in
* ereport(ERROR), which is not desirable for GUC. We did what we
* could to guard against this in flatten_set_variable_args, but a
* string coming in from postgresql.conf might contain anything.
*/
interval = DatumGetIntervalP(
DirectFunctionCall3(interval_in, CStringGetDatum(val), ObjectIdGetDatum(InvalidOid), Int32GetDatum(-1)));
pfree(val);
if (interval->month != 0) {
GUC_check_errdetail("Cannot specify months in time zone interval.");
pfree(interval);
return false;
}
if (interval->day != 0) {
GUC_check_errdetail("Cannot specify days in time zone interval.");
pfree(interval);
return false;
}
/* Here we change from SQL to Unix sign convention */
#ifdef HAVE_INT64_TIMESTAMP
myextra.CTimeZone = -(interval->time / USECS_PER_SEC);
#else
myextra.CTimeZone = -interval->time;
#endif
myextra.HasCTZSet = true;
pfree(interval);
} else {
/*
* Try it as a numeric number of hours (possibly fractional).
*/
hours = strtod(*newval, &endptr);
if (endptr != *newval && *endptr == '\0') {
/* Here we change from SQL to Unix sign convention */
myextra.CTimeZone = -hours * SECS_PER_HOUR;
myextra.HasCTZSet = true;
} else {
/*
* Otherwise assume it is a timezone name, and try to load it.
*/
pg_tz* new_tz = NULL;
new_tz = pg_tzset(*newval);
if (new_tz == NULL) {
/* Doesn't seem to be any great value in errdetail here */
return false;
}
if (!pg_tz_acceptable(new_tz)) {
GUC_check_errmsg("time zone \"%s\" appears to use leap seconds", *newval);
GUC_check_errdetail("PostgreSQL does not support leap seconds.");
return false;
}
myextra.session_timezone = new_tz;
myextra.HasCTZSet = false;
}
}
/*
* Prepare the canonical string to return. GUC wants it malloc'd.
*
* Note: the result string should be something that we'd accept as input.
* We use the numeric format for interval cases, because it's simpler to
* reload. In the named-timezone case, *newval is already OK and need not
* be changed; it might not have the canonical casing, but that's taken
* care of by show_timezone.
*/
if (myextra.HasCTZSet) {
char* result = NULL;
const uint32 result_len = 64;
errno_t rc = 0;
result = (char*)MemoryContextAlloc(u_sess->top_mem_cxt, top_mem_cxt_size);
if (result == NULL)
return false;
rc = snprintf_s(
result, result_len, result_len - 1, "%.5f", (double)(-myextra.CTimeZone) / (double)SECS_PER_HOUR);
securec_check_ss(rc, "\0", "\0");
pfree(*newval);
*newval = result;
}
/*
* Pass back data for assign_timezone to use
*/
*extra = MemoryContextAlloc(u_sess->top_mem_cxt, sizeof(timezone_extra));
if (!*extra) {
return false;
}
errno_t errorno = EOK;
errorno = memcpy_s(*extra, sizeof(timezone_extra), &myextra, sizeof(timezone_extra));
securec_check(errorno, "\0", "\0");
return true;
}
/*
* assign_timezone: GUC assign_hook for timezone
*/
void assign_timezone(const char* newval, void* extra)
{
timezone_extra* myextra = (timezone_extra*)extra;
u_sess->attr.attr_common.session_timezone = myextra->session_timezone;
u_sess->time_cxt.CTimeZone = myextra->CTimeZone;
u_sess->time_cxt.HasCTZSet = myextra->HasCTZSet;
}
/*
* show_timezone: GUC show_hook for timezone
*
* We wouldn't need this, except that historically interval values have been
* shown without an INTERVAL prefix, so the display format isn't what would
* be accepted as input. Otherwise we could have check_timezone return the
* preferred string to begin with.
*/
const char* show_timezone(void)
{
const char* tzn = NULL;
if (u_sess->time_cxt.HasCTZSet) {
Interval interval;
interval.month = 0;
interval.day = 0;
#ifdef HAVE_INT64_TIMESTAMP
interval.time = -(u_sess->time_cxt.CTimeZone * USECS_PER_SEC);
#else
interval.time = -u_sess->time_cxt.CTimeZone;
#endif
tzn = DatumGetCString(DirectFunctionCall1(interval_out, IntervalPGetDatum(&interval)));
} else
tzn = pg_get_timezone_name(session_timezone);
if (tzn != NULL)
return tzn;
return "unknown";
}
/*
* LOG_TIMEZONE
*
* For log_timezone, we don't support the interval-based methods of setting a
* zone, which are only there for SQL spec compliance not because they're
* actually useful.
*/
/*
* check_log_timezone: GUC check_hook for log_timezone
*/
bool check_log_timezone(char** newval, void** extra, GucSource source)
{
pg_tz* new_tz = NULL;
/*
* Assume it is a timezone name, and try to load it.
*/
new_tz = pg_tzset(*newval);
if (new_tz == NULL) {
/* Doesn't seem to be any great value in errdetail here */
return false;
}
if (!pg_tz_acceptable(new_tz)) {
GUC_check_errmsg("time zone \"%s\" appears to use leap seconds", *newval);
GUC_check_errdetail("PostgreSQL does not support leap seconds.");
return false;
}
/*
* Pass back data for assign_log_timezone to use
*/
*extra = MemoryContextAlloc(u_sess->top_mem_cxt, sizeof(pg_tz*));
if (!*extra) {
return false;
}
errno_t errorno = EOK;
errorno = memcpy_s(*extra, sizeof(pg_tz*), &new_tz, sizeof(pg_tz*));
securec_check(errorno, "\0", "\0");
return true;
}
/*
* assign_log_timezone: GUC assign_hook for log_timezone
*/
void assign_log_timezone(const char* newval, void* extra)
{
u_sess->attr.attr_common.log_timezone = *((pg_tz**)extra);
}
/*
* show_log_timezone: GUC show_hook for log_timezone
*/
const char* show_log_timezone(void)
{
const char* tzn = NULL;
tzn = pg_get_timezone_name(log_timezone);
if (tzn != NULL)
return tzn;
return "unknown";
}
/*
* SET TRANSACTION READ ONLY and SET TRANSACTION READ WRITE
*
* We allow idempotent changes (r/w -> r/w and r/o -> r/o) at any time, and
* we also always allow changes from read-write to read-only. However,
* read-only may be changed to read-write only when in a top-level transaction
* that has not yet taken an initial snapshot. Can't do it in a hot standby
* slave, either.
*
* If we are not in a transaction at all, just allow the change; it means
* nothing since XactReadOnly will be reset by the next StartTransaction().
* The IsTransactionState() test protects us against trying to check
* RecoveryInProgress() in contexts where shared memory is not accessible.
*/
bool check_transaction_read_only(bool* newval, void** extra, GucSource source)
{
if (*newval == false && u_sess->attr.attr_common.XactReadOnly && IsTransactionState() &&
!t_thrd.bgworker_cxt.InitializingParallelWorker) {
/* Can't go to r/w mode inside a r/o transaction */
if (IsSubTransaction()) {
GUC_check_errcode(ERRCODE_ACTIVE_SQL_TRANSACTION);
GUC_check_errmsg("cannot set transaction read-write mode inside a read-only transaction");
return false;
}
/* Top level transaction can't change to r/w after first snapshot. */
if (u_sess->utils_cxt.FirstSnapshotSet) {
GUC_check_errcode(ERRCODE_ACTIVE_SQL_TRANSACTION);
GUC_check_errmsg("transaction read-write mode must be set before any query");
return false;
}
/* Can't go to r/w mode while recovery is still active */
if (RecoveryInProgress()) {
GUC_check_errcode(ERRCODE_FEATURE_NOT_SUPPORTED);
GUC_check_errmsg("cannot set transaction read-write mode during recovery");
return false;
}
}
return true;
}
/*
* SET TRANSACTION ISOLATION LEVEL
*
* We allow idempotent changes at any time, but otherwise this can only be
* changed in a toplevel transaction that has not yet taken a snapshot.
*
* As in check_transaction_read_only, allow it if not inside a transaction.
*/
bool check_XactIsoLevel(char** newval, void** extra, GucSource source)
{
int newXactIsoLevel;
if (strcmp(*newval, "serializable") == 0) {
#ifdef PGXC
/*
* PGXC does not support 9.1 serializable transactions yet
*/
newXactIsoLevel = XACT_REPEATABLE_READ;
#else
newXactIsoLevel = XACT_SERIALIZABLE;
#endif
} else if (strcmp(*newval, "repeatable read") == 0) {
newXactIsoLevel = XACT_REPEATABLE_READ;
} else if (strcmp(*newval, "read committed") == 0) {
newXactIsoLevel = XACT_READ_COMMITTED;
} else if (strcmp(*newval, "read uncommitted") == 0) {
newXactIsoLevel = XACT_READ_UNCOMMITTED;
} else if (strcmp(*newval, "default") == 0) {
newXactIsoLevel = u_sess->attr.attr_common.DefaultXactIsoLevel;
} else
return false;
if (newXactIsoLevel != u_sess->utils_cxt.XactIsoLevel && IsTransactionState()) {
if (u_sess->utils_cxt.FirstSnapshotSet) {
GUC_check_errcode(ERRCODE_ACTIVE_SQL_TRANSACTION);
GUC_check_errmsg("SET TRANSACTION ISOLATION LEVEL must be called before any query");
return false;
}
/* We ignore a subtransaction setting it to the existing value. */
if (IsSubTransaction()) {
GUC_check_errcode(ERRCODE_ACTIVE_SQL_TRANSACTION);
GUC_check_errmsg("SET TRANSACTION ISOLATION LEVEL must not be called in a subtransaction");
return false;
}
/* Can't go to serializable mode while recovery is still active */
if (newXactIsoLevel == XACT_SERIALIZABLE && RecoveryInProgress()) {
GUC_check_errcode(ERRCODE_FEATURE_NOT_SUPPORTED);
GUC_check_errmsg("cannot use serializable mode in a hot standby");
GUC_check_errhint("You can use REPEATABLE READ instead.");
return false;
}
}
*extra = MemoryContextAlloc(u_sess->top_mem_cxt, sizeof(int));
if (!*extra) {
return false;
}
*((int*)*extra) = newXactIsoLevel;
return true;
}
void assign_XactIsoLevel(const char* newval, void* extra)
{
u_sess->utils_cxt.XactIsoLevel = *((int*)extra);
#ifdef PGXC
/*
* PGXC does not support 9.1 serializable transactions yet
*/
if (u_sess->utils_cxt.XactIsoLevel == XACT_SERIALIZABLE)
u_sess->utils_cxt.XactIsoLevel = XACT_REPEATABLE_READ;
#endif
}
const char* show_XactIsoLevel(void)
{
/* We need this because we don't want to show "default". */
switch (u_sess->utils_cxt.XactIsoLevel) {
case XACT_READ_UNCOMMITTED:
return "read uncommitted";
case XACT_READ_COMMITTED:
return "read committed";
case XACT_REPEATABLE_READ:
return "repeatable read";
case XACT_SERIALIZABLE:
return "serializable";
default:
return "bogus";
}
}
/*
* SET TRANSACTION [NOT] DEFERRABLE
*/
bool check_transaction_deferrable(bool* newval, void** extra, GucSource source)
{
if (IsSubTransaction()) {
GUC_check_errcode(ERRCODE_ACTIVE_SQL_TRANSACTION);
GUC_check_errmsg("SET TRANSACTION [NOT] DEFERRABLE cannot be called within a subtransaction");
return false;
}
if (u_sess->utils_cxt.FirstSnapshotSet) {
GUC_check_errcode(ERRCODE_ACTIVE_SQL_TRANSACTION);
GUC_check_errmsg("SET TRANSACTION [NOT] DEFERRABLE must be called before any query");
return false;
}
return true;
}
/*
* Random number seed
*
* We can't roll back the random sequence on error, and we don't want
* config file reloads to affect it, so we only want interactive SET SEED
* commands to set it. We use the "extra" storage to ensure that rollbacks
* don't try to do the operation again.
*/
bool check_random_seed(double* newval, void** extra, GucSource source)
{
*extra = MemoryContextAlloc(u_sess->top_mem_cxt, sizeof(int));
if (!*extra) {
return false;
}
/* Arm the assign only if source of value is an interactive SET */
*((int*)*extra) = (source >= PGC_S_INTERACTIVE);
return true;
}
void assign_random_seed(double newval, void* extra)
{
/* We'll do this at most once for any setting of the GUC variable */
if (*((int*)extra)) {
(void)DirectFunctionCall1(setseed, Float8GetDatum(newval));
}
*((int*)extra) = 0;
}
const char* show_random_seed(void)
{
return "unavailable";
}
/*
* Check enable_mix_replication, Force false
*/
bool check_mix_replication_param(bool* newval, void** extra, GucSource source)
{
if (*newval == true) {
*newval = false;
ereport(LOG, (errmsg("enable_mix_replication cannot be open in currnet version, reset off!")));
}
return true;
}
/*
* SET CLIENT_ENCODING
*/
bool check_client_encoding(char** newval, void** extra, GucSource source)
{
int encoding;
const char* canonical_name = NULL;
if (t_thrd.autonomous_cxt.check_client_encoding_hook) {
t_thrd.autonomous_cxt.check_client_encoding_hook();
}
/* Look up the encoding by name */
encoding = pg_valid_client_encoding(*newval);
if (encoding < 0) {
return false;
}
/* Get the canonical name (no aliases, uniform case) */
canonical_name = pg_encoding_to_char(encoding);
/*
* If we are not within a transaction then PrepareClientEncoding will not
* be able to look up the necessary conversion procs. If we are still
* starting up, it will return "OK" anyway, and InitializeClientEncoding
* will fix things once initialization is far enough along. After
* startup, we'll fail. This would only happen if someone tries to change
* client_encoding in postgresql.conf and then SIGHUP existing sessions.
* It seems like a bad idea for client_encoding to change that way anyhow,
* so we don't go out of our way to support it.
*
* Note: in the postmaster, or any other process that never calls
* InitializeClientEncoding, PrepareClientEncoding will always succeed,
* and so will SetClientEncoding; but they won't do anything, which is OK.
*/
if (PrepareClientEncoding(encoding) < 0) {
if (IsTransactionState()) {
/* Must be a genuine no-such-conversion problem */
GUC_check_errcode(ERRCODE_FEATURE_NOT_SUPPORTED);
GUC_check_errdetail(
"Conversion between %s and %s is not supported.", canonical_name, GetDatabaseEncodingName());
} else {
/* Provide a useful complaint */
GUC_check_errdetail("Cannot change \"client_encoding\" now.");
}
return false;
}
/*
* Replace the user-supplied string with the encoding's canonical name.
* This gets rid of aliases and case-folding variations.
*
* XXX Although canonicalizing seems like a good idea in the abstract, it
* breaks pre-9.1 JDBC drivers, which expect that if they send "UNICODE"
* as the client_encoding setting then it will read back the same way. As
* a workaround, don't replace the string if it's "UNICODE". Remove that
* hack when pre-9.1 JDBC drivers are no longer in use.
*/
if (strcmp(*newval, canonical_name) != 0 && strcmp(*newval, "UNICODE") != 0) {
pfree(*newval);
*newval = MemoryContextStrdup(u_sess->top_mem_cxt, canonical_name);
if (!*newval) {
return false;
}
}
/*
* Save the encoding's ID in *extra, for use by assign_client_encoding.
*/
*extra = MemoryContextAlloc(u_sess->top_mem_cxt, sizeof(int));
if (!*extra) {
return false;
}
*((int*)*extra) = encoding;
return true;
}
void assign_client_encoding(const char* newval, void* extra)
{
int encoding = *((int*)extra);
/*
* Parallel workers send data to the leader, not the client. They always
* send data using the database encoding.
*/
if (IsParallelWorker()) {
/*
* During parallel worker startup, we want to accept the leader's
* client_encoding setting so that anyone who looks at the value in
* the worker sees the same value that they would see in the leader.
*/
if (t_thrd.bgworker_cxt.InitializingParallelWorker)
return;
/*
* A change other than during startup, for example due to a SET clause
* attached to a function definition, should be rejected, as there is
* nothing we can do inside the worker to make it take effect.
*/
ereport(ERROR, (errcode(ERRCODE_INVALID_TRANSACTION_STATE),
errmsg("cannot change client_encoding during a parallel operation")));
}
/* We do not expect an error if PrepareClientEncoding succeeded */
if (SetClientEncoding(encoding) < 0)
elog(LOG, "SetClientEncoding(%d) failed", encoding);
}
/*
* SET SESSION AUTHORIZATION
*/
typedef struct {
/* This is the "extra" state for both SESSION AUTHORIZATION and ROLE */
Oid roleid;
bool is_superuser;
} role_auth_extra;
bool check_session_authorization(char** newval, void** extra, GucSource source)
{
HeapTuple roleTup;
Oid roleid;
bool is_superuser = false;
role_auth_extra* myextra = NULL;
/* Do nothing for the boot_val default of NULL */
if (*newval == NULL)
return true;
if (!IsTransactionState()) {
/*
* Can't do catalog lookups, so fail. The result of this is that
* session_authorization cannot be set in postgresql.conf, which seems
* like a good thing anyway, so we don't work hard to avoid it.
*/
return false;
}
/* Look up the username */
roleTup = SearchSysCache1(AUTHNAME, PointerGetDatum(*newval));
if (!HeapTupleIsValid(roleTup)) {
GUC_check_errmsg("role \"%s\" does not exist", *newval);
return false;
}
roleid = HeapTupleGetOid(roleTup);
is_superuser = ((Form_pg_authid)GETSTRUCT(roleTup))->rolsuper;
ReleaseSysCache(roleTup);
/* Set up "extra" struct for assign_session_authorization to use */
myextra = (role_auth_extra*)MemoryContextAlloc(u_sess->top_mem_cxt, sizeof(role_auth_extra));
if (myextra == NULL)
return false;
myextra->roleid = roleid;
myextra->is_superuser = is_superuser;
*extra = (void*)myextra;
return true;
}
bool is_user_name_changed()
{
/* none is in set and reset condition. */
if (u_sess->misc_cxt.CurrentUserName && 0 == strncmp(u_sess->misc_cxt.CurrentUserName, "none", strlen("none")))
return false;
else if (u_sess->proc_cxt.MyProcPort)
return u_sess->misc_cxt.CurrentUserName != u_sess->proc_cxt.MyProcPort->user_name;
else
return false;
}
void assign_session_authorization(const char* newval, void* extra)
{
role_auth_extra* myextra = (role_auth_extra*)extra;
Oid old_user = GetCurrentUserId();
/* Do nothing for the boot_val default of NULL */
if (myextra == NULL)
return;
SetSessionAuthorization(myextra->roleid, myextra->is_superuser);
/*
* 1.If we set u_sess->misc_cxt.CurrentUserName only when user changed, read u_sess->misc_cxt.CurrentUserName will
* cause heap-use-after-free ERROR when SET SESSION AUTHORIZATION to the same user(test: cluster_sql_count).
* 2.u_sess->misc_cxt.CurrentUserName should not be set in InitializeOneGUCOption() when it equal to NULL,
* it will be initialized to u_sess->proc_cxt.MyProcPort->user_name.
*/
if (old_user != GetCurrentUserId() || u_sess->misc_cxt.CurrentUserName != NULL)
u_sess->misc_cxt.CurrentUserName = newval;
}
bool check_role(char** newval, void** extra, GucSource source)
{
HeapTuple roleTup;
Oid roleid;
bool is_superuser = false;
role_auth_extra* myextra = NULL;
if (strcmp(*newval, "none") == 0) {
/* hardwired translation */
roleid = InvalidOid;
is_superuser = false;
} else {
if (!IsTransactionState()) {
/*
* Can't do catalog lookups, so fail. The result of this is that
* role cannot be set in postgresql.conf, which seems like a good
* thing anyway, so we don't work hard to avoid it.
*/
return false;
}
/* Look up the username */
roleTup = SearchSysCache1(AUTHNAME, PointerGetDatum(*newval));
if (!HeapTupleIsValid(roleTup)) {
GUC_check_errmsg("role \"%s\" does not exist", *newval);
return false;
}
roleid = HeapTupleGetOid(roleTup);
is_superuser = ((Form_pg_authid)GETSTRUCT(roleTup))->rolsuper;
ReleaseSysCache(roleTup);
/* Even for sysadmin user, we could not set role to initdb user */
if (is_superuser) {
if (GetUserId() != BOOTSTRAP_SUPERUSERID) {
GUC_check_errcode(ERRCODE_INSUFFICIENT_PRIVILEGE);
GUC_check_errmsg("permission denied to set role \"%s\"", *newval);
return false;
}
}
/*
* Verify that session user is allowed to become this role, but skip
* this in parallel mode, where we must blindly recreate the parallel
* leader's state.
*/
if (!t_thrd.bgworker_cxt.InitializingParallelWorker && !is_member_of_role(GetSessionUserId(), roleid)) {
GUC_check_errcode(ERRCODE_INSUFFICIENT_PRIVILEGE);
GUC_check_errmsg("permission denied to set role \"%s\"", *newval);
return false;
}
}
/* Set up "extra" struct for assign_role to use */
myextra = (role_auth_extra*)MemoryContextAlloc(u_sess->top_mem_cxt, sizeof(role_auth_extra));
if (myextra == NULL)
return false;
myextra->roleid = roleid;
myextra->is_superuser = is_superuser;
*extra = (void*)myextra;
return true;
}
void assign_role(const char* newval, void* extra)
{
role_auth_extra* myextra = (role_auth_extra*)extra;
Oid old_user = GetCurrentUserId();
SetCurrentRoleId(myextra->roleid, myextra->is_superuser);
/*
* 1.If we set u_sess->misc_cxt.CurrentUserName only when user changed, read u_sess->misc_cxt.CurrentUserName will
* cause heap-use-after-free ERROR when SET ROLE to the same user(test: hw_account_lock).
* 2.u_sess->misc_cxt.CurrentUserName should not be set to "none" in InitializeOneGUCOption() when it equal to NULL,
* it will be initialized to u_sess->proc_cxt.MyProcPort->user_name.
*/
if (old_user != GetCurrentUserId() || u_sess->misc_cxt.CurrentUserName != NULL)
u_sess->misc_cxt.CurrentUserName = newval;
}
const char* show_role(void)
{
/*
* Check whether SET ROLE is active; if not return "none". This is a
* kluge to deal with the fact that SET SESSION AUTHORIZATION logically
* resets SET ROLE to NONE, but we cannot set the GUC role variable from
* assign_session_authorization (because we haven't got enough info to
* call set_config_option).
*/
if (!OidIsValid(GetCurrentRoleId()))
return "none";
/* Otherwise we can just use the GUC string */
return u_sess->attr.attr_common.role_string ? u_sess->attr.attr_common.role_string : "none";
}
extern char g_bbox_dump_path[];
const char* show_bbox_dump_path(void)
{
const char* path = g_bbox_dump_path;
if (path != NULL)
return path;
return "";
}
Reference in New Issue View Git Blame Copy Permalink