Re: RLS Design - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: RLS Design
Date
Msg-id 20140709060717.GG16422@tamriel.snowman.net
Whole thread Raw
In response to Re: RLS Design  (Kohei KaiGai <kaigai@kaigai.gr.jp>)
Responses Re: RLS Design  (Kohei KaiGai <kaigai@kaigai.gr.jp>)
List pgsql-hackers
KaiGai,

* Kohei KaiGai (kaigai@kaigai.gr.jp) wrote:
> What I'd like to implement is adjustment of query like:
>   SELECT * FROM t1 WHERE (x like '%abc%') AND (quals by built-in RLS)
>           AND (quals by extension-1) AND ... AND (quals by extension-N);
> I never mind even if qualifiers in the second block are connected with OR'd
> manner, however, I want RLS infrastructure to accept additional security
> models provided by extensions.

Would having a table-level 'AND'-vs-'OR' modifier for the RLS policies
on that table be sufficient for what you're looking for?  That seems a
simple enough addition which would still allow more complex groups to be
developed later on...
Thanks!
    Stephen

pgsql-hackers by date:

Previous
From: Stephen Frost
Date:
Subject: Re: RLS Design
Next
From: Michael Paquier
Date:
Subject: Re: Doing better at HINTing an appropriate column within errorMissingColumn()