pgsql: sepgsql: Enforce db_procedure:{execute} permission.

sepgsql: Enforce db_procedure:{execute} permission.

To do this, we add an additional object access hook type,
OAT_FUNCTION_EXECUTE.

KaiGai Kohei

Branch
------
master

Details
-------
http://git.postgresql.org/pg/commitdiff/f8a54e936bdf4c31b395a2ab7d7bc98eefa6dbad

Modified Files
--------------
contrib/sepgsql/expected/label.out   |   17 +++++++++
contrib/sepgsql/expected/misc.out    |   67 ++++++++++++++++++++++++++++++++++
contrib/sepgsql/hooks.c              |    7 ++++
contrib/sepgsql/label.c              |   23 +++++++++++-
contrib/sepgsql/proc.c               |   26 +++++++++++++
contrib/sepgsql/sepgsql-regtest.te   |   23 +++---------
contrib/sepgsql/sepgsql.h            |    1 +
contrib/sepgsql/sql/label.sql        |    2 +
contrib/sepgsql/sql/misc.sql         |   25 +++++++++++++
doc/src/sgml/sepgsql.sgml            |    7 +++-
src/backend/catalog/objectaccess.c   |   17 +++++++++
src/backend/executor/execQual.c      |    3 ++
src/backend/executor/nodeAgg.c       |    4 ++
src/backend/executor/nodeWindowAgg.c |    4 ++
src/backend/tcop/fastpath.c          |    1 +
src/include/catalog/objectaccess.h   |   14 +++++++
16 files changed, 220 insertions(+), 21 deletions(-)