Re: How to get SE-PostgreSQL acceptable - Mailing list pgsql-hackers

From Jonah H. Harris
Subject Re: How to get SE-PostgreSQL acceptable
Date
Msg-id 36e682920901282155x51ccc9afkb0e286bd0e99bdd2@mail.gmail.com
Whole thread Raw
In response to Re: How to get SE-PostgreSQL acceptable  (KaiGai Kohei <kaigai@ak.jp.nec.com>)
List pgsql-hackers
On Wed, Jan 28, 2009 at 9:49 PM, KaiGai Kohei <kaigai@ak.jp.nec.com> wrote:
IIRC, 0racle or M$ has a patent to rewrite WHERE clause for security
purpose, so Tom suggested it should be implemented using a hook
deployed within executor.

Yes, it was Oracle.  There are a couple newer revisions, but they're all based primarily on Patent #6487552, Database Fine-grained Access Control, Filed Oct 5, 1998/Issued Nov 26, 2002.  The patent covers defining a security context, retrieving-defined policies from that context, and applying those policies by directly calling a security-context-related stored procedure in the WHERE clause as well as dynamically adding security-related predicates to the WHERE-clause.

--
Jonah H. Harris, Senior DBA
myYearbook.com

pgsql-hackers by date:

Previous
From: KaiGai Kohei
Date:
Subject: Re: How to get SE-PostgreSQL acceptable
Next
From: Sushant Sinha
Date:
Subject: possible bug in cover density ranking?