Re: [HACKERS] Partitioned tables vs GRANT

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: [HACKERS] Partitioned tables vs GRANT
Дата
Msg-id 27428.1491612088@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: [HACKERS] Partitioned tables vs GRANT  (Keith Fiske <keith@omniti.com>)
Ответы Re: [HACKERS] Partitioned tables vs GRANT
Список pgsql-hackers
Keith Fiske <keith@omniti.com> writes:
> On Fri, Apr 7, 2017 at 2:46 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> Joe Conway <mail@joeconway.com> writes:
>>> Apparently INSERT and SELECT on the parent partitioned table skip normal
>>> acl checks on the partitions. Is that intended behavior?

>> Yes, this matches normal inheritance behavior.

> Should that really be normal partitioning behavior though?

Yes, it should.  Consider the alternatives:

1. Owner must remember to run around and grant permissions on all child
tables along with the parent.

2. The system silently(?) doesn't show you some rows that are supposed
to be visible when scanning the parent table.

If you want RLS, use RLS; this is not that, and is not a good substitute.

(We've been around on this topic before, btw.  See the archives.)
        regards, tom lane



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: [HACKERS] WAL logging problem in 9.4.3?
Следующее
От: Andres Freund
Дата:
Сообщение: Re: [HACKERS] Vacuum: allow usage of more than 1GB of work mem