Re: SE-PostgreSQL and row level security - Mailing list pgsql-hackers

From Kevin Grittner
Subject Re: SE-PostgreSQL and row level security
Date
Msg-id 49993078.EE98.0025.0@wicourts.gov
Whole thread Raw
In response to Re: SE-PostgreSQL and row level security  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: SE-PostgreSQL and row level security  (Tom Lane <tgl@sss.pgh.pa.us>)
Re: SE-PostgreSQL and row level security/Alternatives  (Andres Freund <andres@anarazel.de>)
List pgsql-hackers
>>> Tom Lane <tgl@sss.pgh.pa.us> wrote: 
> We have seen no evidence that anyone has a worked-out
> set of design rules that make a SE-Postgres database secure against
> these issues, so the whole thing is pie in the sky.
I've seen several mentions of the rule "Don't use a column containing
data you want to secure as part of the primary key." mentioned several
times in these threads.  I think that just might be the complete set. 
Can anyone show that it's not?
-Kevin


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: SE-PostgreSQL and row level security
Next
From: Tom Lane
Date:
Subject: Re: SE-PostgreSQL and row level security