Re: row_security GUC, BYPASSRLS

Поиск
Список
Период
Сортировка
От Joe Conway
Тема Re: row_security GUC, BYPASSRLS
Дата
Msg-id 55F84615.2030303@joeconway.com
обсуждение исходный текст
Ответ на Re: row_security GUC, BYPASSRLS  (Robert Haas <robertmhaas@gmail.com>)
Ответы Re: row_security GUC, BYPASSRLS  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
On 09/15/2015 10:58 AM, Robert Haas wrote:
> I can't argue with that, I suppose, but I think row_security=force is
> a pretty useful convenience.  If we must remove it, so be it, but I'd
> be a little sad.

There are use cases where row_security=force will be set in production
environments, not only in testing. I would be very strongly opposed to
removing the ability to force RLS from being applied to owners and
superusers, and in fact think we should figure out how to make changing
row_security, once it is set, more difficult.

Joe

--
Crunchy Data - http://crunchydata.com
PostgreSQL Support for Secure Enterprises
Consulting, Training, & Open Source Development


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: row_security GUC, BYPASSRLS
Следующее
От: Joe Conway
Дата:
Сообщение: Re: row_security GUC, BYPASSRLS