pgsql: Ensure COPY TO on an RLS-enabled table copies no more than it sh - Mailing list pgsql-committers

From Tom Lane
Subject pgsql: Ensure COPY TO on an RLS-enabled table copies no more than it sh
Date
Msg-id E1pahrN-002t7D-0V@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Ensure COPY TO on an RLS-enabled table copies no more than it should.

The COPY documentation is quite clear that "COPY relation TO" copies
rows from only the named table, not any inheritance children it may
have.  However, if you enabled row-level security on the table then
this stopped being true, because the code forgot to apply the ONLY
modifier in the "SELECT ... FROM relation" query that it constructs
in order to allow RLS predicates to be attached.  Fix that.

Report and patch by Antonin Houska (comment adjustments and test case
by me).  Back-patch to all supported branches.

Discussion: https://postgr.es/m/3472.1675251957@antos

Branch
------
REL_11_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/6e2674d772b017f4ad4e36394aa1cf64c05b46e5

Modified Files
--------------
src/backend/commands/copy.c               |  9 +++++---
src/test/regress/expected/rowsecurity.out | 37 +++++++++++++++++++++++++++++++
src/test/regress/sql/rowsecurity.sql      | 34 ++++++++++++++++++++++++++++
3 files changed, 77 insertions(+), 3 deletions(-)


pgsql-committers by date:

Previous
From: Jeff Davis
Date:
Subject: pgsql: initdb: derive encoding from locale for ICU; similar to libc.
Next
From: Jeff Davis
Date:
Subject: Re: pgsql: Add standard collation UNICODE