Re: Review of Row Level Security - Mailing list pgsql-hackers

From Simon Riggs
Subject Re: Review of Row Level Security
Date
Msg-id CA+U5nM+iGWEVQmcg98N6-4zgvmMp3yEdT0sN6TLEN=FRLq-53Q@mail.gmail.com
Whole thread Raw
In response to Re: Review of Row Level Security  ("Kevin Grittner" <kgrittn@mail.com>)
List pgsql-hackers
On 20 December 2012 21:50, Kevin Grittner <kgrittn@mail.com> wrote:

> How about using existing GRANT syntax but allowing a
> WHERE clause?

It's a nice feature, but a completely different thing to what is being
discussed here.

Row security adds the ability to enforce a single coherent policy at
table level. It might be nice to have multiple, potentially
overlapping policies, but that would require significantly different
design and coding to what we have here. For me, enforcing a single
policy at table level helps to make it secure by being coherent and
understandable. So perhaps in later releases we might do the feature
you suggest.

-- Simon Riggs                   http://www.2ndQuadrant.com/PostgreSQL Development, 24x7 Support, Training & Services



pgsql-hackers by date:

Previous
From: Thom Brown
Date:
Subject: Re: Switching timeline over streaming replication
Next
From: Jeff Janes
Date:
Subject: Re: Set visibility map bit after HOT prune