Re: BUG #14682: row level security not work with partitioned table

From: Joe Conway <mail(at)joeconway(dot)com>
To: Noah Misch <noah(at)leadboat(dot)com>, Robert Haas <robertmhaas(at)gmail(dot)com>
Cc: Mike Palmiotto <mike(dot)palmiotto(at)crunchydata(dot)com>, fte(at)nct(dot)ru, PostgreSQL mailing lists <pgsql-bugs(at)postgresql(dot)org>, Michael Paquier <michael(dot)paquier(at)gmail(dot)com>, Amit Langote <amitlangote09(at)gmail(dot)com>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: BUG #14682: row level security not work with partitioned table
Date: 2017-06-05 14:20:46
Message-ID: 665f3a45-46e0-e49e-b4c0-5159785b638a@joeconway.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs pgsql-hackers

On 06/04/2017 03:33 PM, Noah Misch wrote:
> On Fri, Jun 02, 2017 at 09:28:16AM +0900, Michael Paquier wrote:
>> On Thu, Jun 1, 2017 at 11:13 AM, Mike Palmiotto
>> <mike(dot)palmiotto(at)crunchydata(dot)com> wrote:
>> > This is indeed a bug. fireRIRrules is currently skipping the RLS
>> > policy check when relkind == PARTITIONED_TABLES, so RLS policies are
>> > not applied. The attached patch fixes the behavior.
>>
>> I would expect RLS to trigger as well in this context. Note that there
>> should be regression tests to avoid this failure again in the future.
>> I have added an open item.
>
> [Action required within three days. This is a generic notification.]
>
> The above-described topic is currently a PostgreSQL 10 open item. Robert,
> since you committed the patch believed to have created it, you own this open
> item.

Unless Robert objects, I'll work with Mike to get a fix posted and
committed in the next day or two.

Joe

--
Crunchy Data - http://crunchydata.com
PostgreSQL Support for Secure Enterprises
Consulting, Training, & Open Source Development

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Robert Haas 2017-06-05 14:36:51 Re: BUG #14682: row level security not work with partitioned table
Previous Message Tom Lane 2017-06-05 14:01:45 Re: BUG #14688: Wrong results in LIKE operation on JSON Type

Browse pgsql-hackers by date

  From Date Subject
Next Message Robert Haas 2017-06-05 14:36:09 Re: Proposal : For Auto-Prewarm.
Previous Message Robert Haas 2017-06-05 14:19:02 Re: PG10 transition tables, wCTEs and multiple operations on the same table