Re: pgaudit - an auditing extension for PostgreSQL

Stephen Frost <sfrost(at)snowman(dot)net> writes:
> * Bruce Momjian (bruce(at)momjian(dot)us) wrote:
>> Actually, thinking more, Stephen Frost mentioned that the auditing
>> system has to modify database _state_, and dumping/restoring the state
>> of an extension might be tricky.

> This is really true of any extension which wants to attach information
> or track things associated with roles or other database objects. What
> I'd like to avoid is having an extension which does so through an extra
> table or through reloptions or one of the other approaches which exists
> in contrib and which implements a capability we're looking at adding to
> core

We have core code that uses reloptions --- autovacuum for instance ---
so I'm not exactly clear on why that's so unacceptable for this.

If the concern is that the required metadata is going to change over time,
I'd suggest that maybe an extension is the right place for it,
permanently. We have some infrastructure for extension version upgrades,
which could cope with metadata changes. There's not nearly as much
provision for changes of core state.

regards, tom lane