(refactored branch) Proposal: Mode in which all superuser operations are output to the audit log.

[harada-toshi]

Outline of the proposal

In the audit of PostgreSQL, it is important to logging the operation of the super user role (ex. "postgres").
For this reason, we propose adding a mode (log_superuser) to forcibly logging superuser operations in the option section of the configuration file.

Setting Example

[option]
  log_superuser = on

• Parameter type is boolean.
• The default value is on.

Behavior when log_superuser is on

• All operations by roles with super user authority are subject to audit log output. Specifying the filter described in the rule section is invalidated.
• For roles that are not superuser privileges, output the audit log according to the filter specification described in the rule section.

Behavior when log_superuser is off

• Output the audit log according to the filter specification described in the rule section.