Re: [PATCH] Add reloption for views to enable RLS - Mailing list pgsql-hackers

From Laurenz Albe
Subject Re: [PATCH] Add reloption for views to enable RLS
Date
Msg-id 334bd4c7fe33a8609c0e7a5d490487086e18f9ac.camel@cybertec.at
Whole thread Raw
In response to Re: [PATCH] Add reloption for views to enable RLS  (Dean Rasheed <dean.a.rasheed@gmail.com>)
List pgsql-hackers
On Wed, 2022-03-02 at 10:10 +0000, Dean Rasheed wrote:
> > I kept "check_permissions_owner" for now. Constantly changing it around
> > with each iteration doesn't really bring any value IMHO, I'd rather have
> > a final consensus on how to name the option and *then* change it for good.
> 
> Yes indeed, it's annoying to keep changing the name between patch
> versions, so let's try to get a consensus now.
> 
> For my part, I find myself more and more convinced that
> "security_invoker" is the right name [...]
> 
> What are other people's opinions?

I am fine with "security_invoker".  If there are other databases that use the
same term for the same thing, that is a strong argument.

I also agree that having "off" for the default setting is nicer.

My main worry is that other people misunderstand it in the same way that
Walter did, namely that this behaves just like security invoker functions.
But if the behavior is well documented, I think that is ok.

Yours,
Laurenz Albe




pgsql-hackers by date:

Previous
From: Bharath Rupireddy
Date:
Subject: Re: Report checkpoint progress with pg_stat_progress_checkpoint (was: Report checkpoint progress in server logs)
Next
From: Jille Timmermans
Date:
Subject: Re: Support for grabbing multiple consecutive values with nextval()