pgsql: Adjust behavior of row_security GUC to match the docs. - Mailing list pgsql-committers

From Tom Lane
Subject pgsql: Adjust behavior of row_security GUC to match the docs.
Date
Msg-id E1aG8pR-0004gO-Su@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Adjust behavior of row_security GUC to match the docs.

Some time back we agreed that row_security=off should not be a way to
bypass RLS entirely, but only a way to get an error if it was being
applied.  However, the code failed to act that way for table owners.
Per discussion, this is a must-fix bug for 9.5.0.

Adjust the logic in rls.c to behave as expected; also, modify the
error message to be more consistent with the new interpretation.
The regression tests need minor corrections as well.  Also update
the comments about row_security in ddl.sgml to be correct.  (The
official description of the GUC in config.sgml is already correct.)

I failed to resist the temptation to do some other very minor
cleanup as well, such as getting rid of a duplicate extern declaration.

Branch
------
REL9_5_STABLE

Details
-------
http://git.postgresql.org/pg/commitdiff/6a77404f5cd9380ccae24414d3f178e79011e96d

Modified Files
--------------
doc/src/sgml/ddl.sgml                     |   34 ++++++++++------
src/backend/utils/misc/rls.c              |   50 ++++++++++++-----------
src/test/regress/expected/rowsecurity.out |   61 ++++++++++-------------------
src/test/regress/sql/rowsecurity.sql      |   25 +++++-------
4 files changed, 78 insertions(+), 92 deletions(-)


pgsql-committers by date:

Previous
From: Robert Haas
Date:
Subject: pgsql: Fix typo in comment.
Next
From: Tom Lane
Date:
Subject: pgsql: Adjust behavior of row_security GUC to match the docs.