Re: row_security GUC, BYPASSRLS - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: row_security GUC, BYPASSRLS
Date
Msg-id 20150920213546.GE3685@tamriel.snowman.net
Whole thread Raw
In response to Re: row_security GUC, BYPASSRLS  (Joe Conway <mail@joeconway.com>)
Responses Re: row_security GUC, BYPASSRLS  (Robert Haas <robertmhaas@gmail.com>)
List pgsql-hackers
* Joe Conway (mail@joeconway.com) wrote:
> On 09/18/2015 01:07 AM, Noah Misch wrote:
> > Great.  Robert, does that work for you, too?  If so, this sub-thread is
> > looking at three patches:
> >
> > 1. remove row_security=force
> > 2. remove SECURITY_ROW_LEVEL_DISABLED; make ri_triggers.c subject to policies
> > 3. add DDL-controlled, per-table policy forcing
> >
> > They ought to land in that order.  PostgreSQL 9.5 would need at least (1) and
> > (2); would RLS experts find it beneficial for me to take care of those?
>
> That would be awesome, but I would say that if we do #1 & 2 for 9.5, we
> also need #3.

Agreed on all of the above.

Thanks!

Stephen

pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: RemoveLocalLock pfree'ing NULL when out-of-memory
Next
From: Stephen Frost
Date:
Subject: Re: CREATE POLICY and RETURNING