Horton

Re: [PATCH] Add reloption for views to enable RLS

Christoph Heiss <christoph.heiss@cybertec.at>

View thread View on postgr.es
From: Christoph Heiss <christoph.heiss@cybertec.at>
To: Dean Rasheed <dean.a.rasheed@gmail.com>
Cc: Laurenz Albe <laurenz.albe@cybertec.at>, walther@technowledgy.de, PostgreSQL Hackers <pgsql-hackers@postgresql.org>, Hans-Jürgen Schönig <hs@cybertec.at>
Date: 2022-03-08T17:17:36Z
Lists: pgsql-hackers

Attachments

On 3/2/22 11:10, Dean Rasheed wrote:
> For my part, I find myself more and more convinced that
> "security_invoker" is the right name, because it matches the
> terminology used for functions, and in other database systems. I think
> the parallels between security invoker functions and security invoker
> views are quite strong.
> 
> [..]
> 
> What are other people's opinions?
> 

Since there don't seem to be any more objections to "security_invoker" I 
attached v10 renaming it again.

I've tried to better clarify the whole invoker vs. definer thing in the 
CREATE VIEW documentation by explicitly mentioning that 
"security_invoker=false" is _not_ the same as "security definer", based 
on the earlier discussions.

This should hopefully avoid any implicit associations.

Thanks,
Christoph

Commits

  1. Add support for security invoker views.

  2. Replace use of deprecated Python module distutils.sysconfig