pgsql: Doc: fix oversimplified example for CREATE POLICY. - Mailing list pgsql-committers

From Tom Lane
Subject pgsql: Doc: fix oversimplified example for CREATE POLICY.
Date
Msg-id E1fkAVd-0005hg-0c@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Doc: fix oversimplified example for CREATE POLICY.

As written, this policy constrained only the post-image not the pre-image
of rows, meaning that users could delete other users' rows or take
ownership of such rows, contrary to what the docs claimed would happen.
We need two separate policies to achieve the documented effect.

While at it, try to explain what's happening a bit more fully.

Per report from Олег Самойлов.  Back-patch to 9.5 where this was added.
Thanks to Stephen Frost for off-list discussion.

Discussion: https://postgr.es/m/3298321532002010@sas1-2b3c3045b736.qloud-c.yandex.net

Branch
------
REL9_6_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/9f508a9d70eedfd668b9377df298ba7e8e465596

Modified Files
--------------
doc/src/sgml/ddl.sgml | 42 +++++++++++++++++++++++++++++++++---------
1 file changed, 33 insertions(+), 9 deletions(-)


pgsql-committers by date:

Previous
From: Peter Eisentraut
Date:
Subject: pgsql: Add ssl_library preset parameter
Next
From: Tom Lane
Date:
Subject: pgsql: Fix pg_dump's failure to dump REPLICA IDENTITY for constraintin