Re: RLS 9.5rc1 configuration changes?

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Ted Toth <txtoth(at)gmail(dot)com>
Cc: pgsql-general <pgsql-general(at)postgresql(dot)org>
Subject: Re: RLS 9.5rc1 configuration changes?
Date: 2016-01-04 22:54:31
Message-ID: 12329.1451948071@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Ted Toth <txtoth(at)gmail(dot)com> writes:
> I had been using CrunchyDatas 9.4 with backported RLS but I decided
> since my ultimate target is 9.5 that I update to it. However now the
> function called for the SELECT policy is not being called. \dt shows
> the policy but EXPLAIN ANALYZE of a select doesn't show the filter.

I'm not sure how Crunchy's 9.4 version behaves, but I'd expect the
policy USING condition to be visible in EXPLAIN in 9.5.

Are you perhaps testing this as a superuser? Superusers bypass RLS
even with FORCE ROW LEVEL SECURITY.

> ... The only
> changes I made for 9.5 were to no longer set row_security to 'force'
> in postgresql.conf

What did you set it to instead?

regards, tom lane

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Edson Richter 2016-01-04 23:02:44 Re: BDR and TX obeyance
Previous Message Ted Toth 2016-01-04 22:44:01 RLS 9.5rc1 configuration changes?