Re: RLS Design

Поиск
Список
Период
Сортировка
От Stephen Frost
Тема Re: RLS Design
Дата
Msg-id 20140702154934.GJ16422@tamriel.snowman.net
обсуждение исходный текст
Ответ на Re: RLS Design  (Robert Haas <robertmhaas@gmail.com>)
Список pgsql-hackers
* Robert Haas (robertmhaas@gmail.com) wrote:
> On Wed, Jul 2, 2014 at 11:42 AM, Stephen Frost <sfrost@snowman.net> wrote:
> >> > What if policies exist and they decide to
> >> > 'turn off' RLS for the table- suddenly everyone can see all the rows?
> >>
> >> That'd be my vote.  Sorta like disabling triggers.
> >
> > Hmm.  Ok- how would you feel about at least spitting out a WARNING if
> > there are still policies on the table in that case..?  Just makes me a
> > bit nervous to have a case where policies can be defined on a table but
> > are not actually being enforced..
>
> Sounds like nanny-ism to me.

Alright, fair enough.  Clearly, the individual changing the RLS on the
table will have to have appropriate rights to do so.
Thanks,
    Stephen

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Palle Girgensohn
Дата:
Сообщение: Re: Keepalive-related socket options under FreeBSD 9, 10
Следующее
От: Tom Lane
Дата:
Сообщение: Re: Re: Patch to send transaction commit/rollback stats to the stats collector unconditionally.