mirror of
https://git.postgresql.org/git/postgresql.git
synced 2024-09-05 11:49:20 +02:00
Remove the row_security=force GUC value.
Every query of a single ENABLE ROW SECURITY table has two meanings, with the row_security GUC selecting between them. With row_security=force available, every function author would have been advised to either set the GUC locally or test both meanings. Non-compliance would have threatened reliability and, for SECURITY DEFINER functions, security. Authors already face an obligation to account for search_path, and we should not mimic that example. With this change, only BYPASSRLS roles need exercise the aforementioned care. Back-patch to 9.5, where the row_security GUC was introduced. Since this narrows the domain of pg_db_role_setting.setconfig and pg_proc.proconfig, one might bump catversion. A row_security=force setting in one of those columns will elicit a clear message, so don't.
This commit is contained in:
parent
1be9d65e17
commit
6dae6edcd8
@ -5541,10 +5541,8 @@ COPY postgres_log FROM '/full/path/to/logfile.csv' WITH csv;
|
|||||||
to queries which are run against tables that have row security enabled.
|
to queries which are run against tables that have row security enabled.
|
||||||
The default is <literal>on</>. When set to <literal>on</>, all users,
|
The default is <literal>on</>. When set to <literal>on</>, all users,
|
||||||
except superusers and the owner of the table, will have the row
|
except superusers and the owner of the table, will have the row
|
||||||
policies for the table applied to their queries. The table owner and
|
policies for the table applied to their queries. When set to
|
||||||
superuser can request that row policies be applied to their queries by
|
<literal>off</>, queries will bypass row policies for the table, if
|
||||||
setting this to <literal>force</>. Lastly, this can also be set to
|
|
||||||
<literal>off</> which will bypass row policies for the table, if
|
|
||||||
possible, and error if not.
|
possible, and error if not.
|
||||||
</para>
|
</para>
|
||||||
|
|
||||||
@ -5557,13 +5555,6 @@ COPY postgres_log FROM '/full/path/to/logfile.csv' WITH csv;
|
|||||||
returned.
|
returned.
|
||||||
</para>
|
</para>
|
||||||
|
|
||||||
<para>
|
|
||||||
The allowed values of <varname>row_security</> are
|
|
||||||
<literal>on</> (apply normally - not to superuser or table owner),
|
|
||||||
<literal>off</> (fail if row security would be applied), and
|
|
||||||
<literal>force</> (apply always - even to superuser and table owner).
|
|
||||||
</para>
|
|
||||||
|
|
||||||
<para>
|
<para>
|
||||||
For more information on row security policies,
|
For more information on row security policies,
|
||||||
see <xref linkend="SQL-CREATEPOLICY">.
|
see <xref linkend="SQL-CREATEPOLICY">.
|
||||||
|
@ -1585,16 +1585,13 @@ REVOKE ALL ON accounts FROM PUBLIC;
|
|||||||
|
|
||||||
<para>
|
<para>
|
||||||
The table owners and superusers bypass the row security system when
|
The table owners and superusers bypass the row security system when
|
||||||
querying a table, by default. Row security can be enabled for
|
querying a table. Any user can request that row security be bypassed by
|
||||||
superusers and table owners by setting
|
setting <xref linkend="guc-row-security"> to <literal>off</literal>. If
|
||||||
<xref linkend="guc-row-security"> to <literal>force</literal>. Any
|
the user does not have privileges to bypass row security when querying a
|
||||||
user can request that row security be bypassed by setting
|
given table then an error will be returned instead. Other users can be
|
||||||
<xref linkend="guc-row-security"> to <literal>off</literal>. If
|
granted the ability to bypass the row security system with
|
||||||
the user does not have privileges to bypass row security when
|
the <literal>BYPASSRLS</literal> role attribute. This attribute can only
|
||||||
querying a given table then an error will be returned instead. Other
|
be set by a superuser.
|
||||||
users can be granted the ability to bypass the row security system
|
|
||||||
with the <literal>BYPASSRLS</literal> role attribute. This
|
|
||||||
attribute can only be set by a superuser.
|
|
||||||
</para>
|
</para>
|
||||||
|
|
||||||
<para>
|
<para>
|
||||||
|
@ -379,23 +379,6 @@ static const struct config_enum_entry huge_pages_options[] = {
|
|||||||
{NULL, 0, false}
|
{NULL, 0, false}
|
||||||
};
|
};
|
||||||
|
|
||||||
/*
|
|
||||||
* Although only "on", "off", and "force" are documented, we
|
|
||||||
* accept all the likely variants of "on" and "off".
|
|
||||||
*/
|
|
||||||
static const struct config_enum_entry row_security_options[] = {
|
|
||||||
{"on", ROW_SECURITY_ON, false},
|
|
||||||
{"off", ROW_SECURITY_OFF, false},
|
|
||||||
{"force", ROW_SECURITY_FORCE, false},
|
|
||||||
{"true", ROW_SECURITY_ON, true},
|
|
||||||
{"false", ROW_SECURITY_OFF, true},
|
|
||||||
{"yes", ROW_SECURITY_ON, true},
|
|
||||||
{"no", ROW_SECURITY_OFF, true},
|
|
||||||
{"1", ROW_SECURITY_ON, true},
|
|
||||||
{"0", ROW_SECURITY_OFF, true},
|
|
||||||
{NULL, 0, false}
|
|
||||||
};
|
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Options for enum values stored in other modules
|
* Options for enum values stored in other modules
|
||||||
*/
|
*/
|
||||||
@ -421,6 +404,7 @@ bool log_statement_stats = false; /* this is sort of all three
|
|||||||
bool log_btree_build_stats = false;
|
bool log_btree_build_stats = false;
|
||||||
char *event_source;
|
char *event_source;
|
||||||
|
|
||||||
|
bool row_security;
|
||||||
bool check_function_bodies = true;
|
bool check_function_bodies = true;
|
||||||
bool default_with_oids = false;
|
bool default_with_oids = false;
|
||||||
bool SQL_inheritance = true;
|
bool SQL_inheritance = true;
|
||||||
@ -452,8 +436,6 @@ int tcp_keepalives_idle;
|
|||||||
int tcp_keepalives_interval;
|
int tcp_keepalives_interval;
|
||||||
int tcp_keepalives_count;
|
int tcp_keepalives_count;
|
||||||
|
|
||||||
int row_security;
|
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* This really belongs in pg_shmem.c, but is defined here so that it doesn't
|
* This really belongs in pg_shmem.c, but is defined here so that it doesn't
|
||||||
* need to be duplicated in all the different implementations of pg_shmem.c.
|
* need to be duplicated in all the different implementations of pg_shmem.c.
|
||||||
@ -1374,6 +1356,15 @@ static struct config_bool ConfigureNamesBool[] =
|
|||||||
false,
|
false,
|
||||||
check_transaction_deferrable, NULL, NULL
|
check_transaction_deferrable, NULL, NULL
|
||||||
},
|
},
|
||||||
|
{
|
||||||
|
{"row_security", PGC_USERSET, CONN_AUTH_SECURITY,
|
||||||
|
gettext_noop("Enable row security."),
|
||||||
|
gettext_noop("When enabled, row security will be applied to all users.")
|
||||||
|
},
|
||||||
|
&row_security,
|
||||||
|
true,
|
||||||
|
NULL, NULL, NULL
|
||||||
|
},
|
||||||
{
|
{
|
||||||
{"check_function_bodies", PGC_USERSET, CLIENT_CONN_STATEMENT,
|
{"check_function_bodies", PGC_USERSET, CLIENT_CONN_STATEMENT,
|
||||||
gettext_noop("Check function bodies during CREATE FUNCTION."),
|
gettext_noop("Check function bodies during CREATE FUNCTION."),
|
||||||
@ -3631,16 +3622,6 @@ static struct config_enum ConfigureNamesEnum[] =
|
|||||||
NULL, NULL, NULL
|
NULL, NULL, NULL
|
||||||
},
|
},
|
||||||
|
|
||||||
{
|
|
||||||
{"row_security", PGC_USERSET, CONN_AUTH_SECURITY,
|
|
||||||
gettext_noop("Enable row security."),
|
|
||||||
gettext_noop("When enabled, row security will be applied to all users.")
|
|
||||||
},
|
|
||||||
&row_security,
|
|
||||||
ROW_SECURITY_ON, row_security_options,
|
|
||||||
NULL, NULL, NULL
|
|
||||||
},
|
|
||||||
|
|
||||||
/* End-of-list marker */
|
/* End-of-list marker */
|
||||||
{
|
{
|
||||||
{NULL, 0, 0, NULL, NULL}, NULL, 0, NULL, NULL, NULL, NULL
|
{NULL, 0, 0, NULL, NULL}, NULL, 0, NULL, NULL, NULL, NULL
|
||||||
|
@ -87,32 +87,19 @@ check_enable_rls(Oid relid, Oid checkAsUser, bool noError)
|
|||||||
/*
|
/*
|
||||||
* Check permissions
|
* Check permissions
|
||||||
*
|
*
|
||||||
* If the relation has row level security enabled and the row_security GUC
|
* Table owners always bypass RLS. Note that superuser is always
|
||||||
* is off, then check if the user has rights to bypass RLS for this
|
* considered an owner. Return RLS_NONE_ENV to indicate that this
|
||||||
* relation. Table owners can always bypass, as can any role with the
|
* decision depends on the environment (in this case, the user_id).
|
||||||
* BYPASSRLS capability.
|
|
||||||
*
|
|
||||||
* If the role is the table owner, then we bypass RLS unless row_security
|
|
||||||
* is set to 'force'. Note that superuser is always considered an owner.
|
|
||||||
*
|
|
||||||
* Return RLS_NONE_ENV to indicate that this decision depends on the
|
|
||||||
* environment (in this case, what the current values of user_id and
|
|
||||||
* row_security are).
|
|
||||||
*/
|
*/
|
||||||
if (row_security != ROW_SECURITY_FORCE
|
if (pg_class_ownercheck(relid, user_id))
|
||||||
&& (pg_class_ownercheck(relid, user_id)))
|
|
||||||
return RLS_NONE_ENV;
|
return RLS_NONE_ENV;
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* If the row_security GUC is 'off' then check if the user has permission
|
* If the row_security GUC is 'off', check if the user has permission to
|
||||||
* to bypass it. Note that we have already handled the case where the
|
* bypass RLS. row_security is always considered 'on' when querying
|
||||||
* user is the table owner above.
|
* through a view or other cases where checkAsUser is valid.
|
||||||
*
|
|
||||||
* Note that row_security is always considered 'on' when querying through
|
|
||||||
* a view or other cases where checkAsUser is true, so skip this if
|
|
||||||
* checkAsUser is in use.
|
|
||||||
*/
|
*/
|
||||||
if (!checkAsUser && row_security == ROW_SECURITY_OFF)
|
if (!row_security && !checkAsUser)
|
||||||
{
|
{
|
||||||
if (has_bypassrls_privilege(user_id))
|
if (has_bypassrls_privilege(user_id))
|
||||||
/* OK to bypass */
|
/* OK to bypass */
|
||||||
|
@ -110,7 +110,7 @@ typedef struct CachedPlanSource
|
|||||||
double total_custom_cost; /* total cost of custom plans so far */
|
double total_custom_cost; /* total cost of custom plans so far */
|
||||||
int num_custom_plans; /* number of plans included in total */
|
int num_custom_plans; /* number of plans included in total */
|
||||||
bool hasRowSecurity; /* planned with row security? */
|
bool hasRowSecurity; /* planned with row security? */
|
||||||
int row_security_env; /* row security setting when planned */
|
bool row_security_env; /* row security setting when planned */
|
||||||
bool rowSecurityDisabled; /* is row security disabled? */
|
bool rowSecurityDisabled; /* is row security disabled? */
|
||||||
} CachedPlanSource;
|
} CachedPlanSource;
|
||||||
|
|
||||||
|
@ -14,15 +14,7 @@
|
|||||||
#define RLS_H
|
#define RLS_H
|
||||||
|
|
||||||
/* GUC variable */
|
/* GUC variable */
|
||||||
extern int row_security;
|
extern bool row_security;
|
||||||
|
|
||||||
/* Possible values for row_security GUC */
|
|
||||||
typedef enum RowSecurityConfigType
|
|
||||||
{
|
|
||||||
ROW_SECURITY_OFF, /* RLS never applied- error thrown if no priv */
|
|
||||||
ROW_SECURITY_ON, /* normal case, RLS applied for regular users */
|
|
||||||
ROW_SECURITY_FORCE /* RLS applied for superusers and table owners */
|
|
||||||
} RowSecurityConfigType;
|
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Used by callers of check_enable_rls.
|
* Used by callers of check_enable_rls.
|
||||||
@ -30,7 +22,7 @@ typedef enum RowSecurityConfigType
|
|||||||
* RLS could be completely disabled on the tables involved in the query,
|
* RLS could be completely disabled on the tables involved in the query,
|
||||||
* which is the simple case, or it may depend on the current environment
|
* which is the simple case, or it may depend on the current environment
|
||||||
* (the role which is running the query or the value of the row_security
|
* (the role which is running the query or the value of the row_security
|
||||||
* GUC- on, off, or force), or it might be simply enabled as usual.
|
* GUC), or it might be simply enabled as usual.
|
||||||
*
|
*
|
||||||
* If RLS isn't on the table involved then RLS_NONE is returned to indicate
|
* If RLS isn't on the table involved then RLS_NONE is returned to indicate
|
||||||
* that we don't need to worry about invalidating the query plan for RLS
|
* that we don't need to worry about invalidating the query plan for RLS
|
||||||
|
@ -359,19 +359,6 @@ SELECT * FROM category;
|
|||||||
44 | manga
|
44 | manga
|
||||||
(4 rows)
|
(4 rows)
|
||||||
|
|
||||||
-- database superuser does not bypass RLS policy when FORCE enabled.
|
|
||||||
RESET SESSION AUTHORIZATION;
|
|
||||||
SET row_security TO FORCE;
|
|
||||||
SELECT * FROM document;
|
|
||||||
did | cid | dlevel | dauthor | dtitle
|
|
||||||
-----+-----+--------+---------+--------
|
|
||||||
(0 rows)
|
|
||||||
|
|
||||||
SELECT * FROM category;
|
|
||||||
cid | cname
|
|
||||||
-----+-------
|
|
||||||
(0 rows)
|
|
||||||
|
|
||||||
-- database superuser does bypass RLS policy when disabled
|
-- database superuser does bypass RLS policy when disabled
|
||||||
RESET SESSION AUTHORIZATION;
|
RESET SESSION AUTHORIZATION;
|
||||||
SET row_security TO OFF;
|
SET row_security TO OFF;
|
||||||
@ -424,19 +411,6 @@ SELECT * FROM category;
|
|||||||
44 | manga
|
44 | manga
|
||||||
(4 rows)
|
(4 rows)
|
||||||
|
|
||||||
-- RLS policy applies to table owner when FORCE enabled.
|
|
||||||
SET SESSION AUTHORIZATION rls_regress_user0;
|
|
||||||
SET row_security TO FORCE;
|
|
||||||
SELECT * FROM document;
|
|
||||||
did | cid | dlevel | dauthor | dtitle
|
|
||||||
-----+-----+--------+---------+--------
|
|
||||||
(0 rows)
|
|
||||||
|
|
||||||
SELECT * FROM category;
|
|
||||||
cid | cname
|
|
||||||
-----+-------
|
|
||||||
(0 rows)
|
|
||||||
|
|
||||||
-- RLS policy does not apply to table owner when RLS enabled.
|
-- RLS policy does not apply to table owner when RLS enabled.
|
||||||
SET SESSION AUTHORIZATION rls_regress_user0;
|
SET SESSION AUTHORIZATION rls_regress_user0;
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
@ -2520,35 +2494,6 @@ EXPLAIN (COSTS OFF) SELECT * FROM t1;
|
|||||||
Seq Scan on t1
|
Seq Scan on t1
|
||||||
(1 row)
|
(1 row)
|
||||||
|
|
||||||
-- Check that default deny does apply to superuser when RLS force.
|
|
||||||
SET row_security TO FORCE;
|
|
||||||
RESET SESSION AUTHORIZATION;
|
|
||||||
SELECT * FROM t1;
|
|
||||||
a | b
|
|
||||||
---+---
|
|
||||||
(0 rows)
|
|
||||||
|
|
||||||
EXPLAIN (COSTS OFF) SELECT * FROM t1;
|
|
||||||
QUERY PLAN
|
|
||||||
--------------------------
|
|
||||||
Result
|
|
||||||
One-Time Filter: false
|
|
||||||
(2 rows)
|
|
||||||
|
|
||||||
-- Check that default deny does apply to table owner when RLS force.
|
|
||||||
SET SESSION AUTHORIZATION rls_regress_user0;
|
|
||||||
SELECT * FROM t1;
|
|
||||||
a | b
|
|
||||||
---+---
|
|
||||||
(0 rows)
|
|
||||||
|
|
||||||
EXPLAIN (COSTS OFF) SELECT * FROM t1;
|
|
||||||
QUERY PLAN
|
|
||||||
--------------------------
|
|
||||||
Result
|
|
||||||
One-Time Filter: false
|
|
||||||
(2 rows)
|
|
||||||
|
|
||||||
-- Check that default deny applies to non-owner/non-superuser when RLS on.
|
-- Check that default deny applies to non-owner/non-superuser when RLS on.
|
||||||
SET SESSION AUTHORIZATION rls_regress_user1;
|
SET SESSION AUTHORIZATION rls_regress_user1;
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
@ -2616,14 +2561,6 @@ COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ',';
|
|||||||
8,c9f0f895fb98ab9159f51fd0297e236d
|
8,c9f0f895fb98ab9159f51fd0297e236d
|
||||||
9,45c48cce2e2d7fbdea1afc51c7c6ad26
|
9,45c48cce2e2d7fbdea1afc51c7c6ad26
|
||||||
10,d3d9446802a44259755d38e6d163e820
|
10,d3d9446802a44259755d38e6d163e820
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ',';
|
|
||||||
0,cfcd208495d565ef66e7dff9f98764da
|
|
||||||
2,c81e728d9d4c2f636f067f89cc14862c
|
|
||||||
4,a87ff679a2f3e71d9181a67b7542122c
|
|
||||||
6,1679091c5a880faf6fb5e6087eb1b2dc
|
|
||||||
8,c9f0f895fb98ab9159f51fd0297e236d
|
|
||||||
10,d3d9446802a44259755d38e6d163e820
|
|
||||||
-- Check COPY TO as user with permissions.
|
-- Check COPY TO as user with permissions.
|
||||||
SET SESSION AUTHORIZATION rls_regress_user1;
|
SET SESSION AUTHORIZATION rls_regress_user1;
|
||||||
SET row_security TO OFF;
|
SET row_security TO OFF;
|
||||||
@ -2637,14 +2574,6 @@ COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --ok
|
|||||||
6,1679091c5a880faf6fb5e6087eb1b2dc
|
6,1679091c5a880faf6fb5e6087eb1b2dc
|
||||||
8,c9f0f895fb98ab9159f51fd0297e236d
|
8,c9f0f895fb98ab9159f51fd0297e236d
|
||||||
10,d3d9446802a44259755d38e6d163e820
|
10,d3d9446802a44259755d38e6d163e820
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --ok
|
|
||||||
0,cfcd208495d565ef66e7dff9f98764da
|
|
||||||
2,c81e728d9d4c2f636f067f89cc14862c
|
|
||||||
4,a87ff679a2f3e71d9181a67b7542122c
|
|
||||||
6,1679091c5a880faf6fb5e6087eb1b2dc
|
|
||||||
8,c9f0f895fb98ab9159f51fd0297e236d
|
|
||||||
10,d3d9446802a44259755d38e6d163e820
|
|
||||||
-- Check COPY TO as user with permissions and BYPASSRLS
|
-- Check COPY TO as user with permissions and BYPASSRLS
|
||||||
SET SESSION AUTHORIZATION rls_regress_exempt_user;
|
SET SESSION AUTHORIZATION rls_regress_exempt_user;
|
||||||
SET row_security TO OFF;
|
SET row_security TO OFF;
|
||||||
@ -2668,14 +2597,6 @@ COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --ok
|
|||||||
6,1679091c5a880faf6fb5e6087eb1b2dc
|
6,1679091c5a880faf6fb5e6087eb1b2dc
|
||||||
8,c9f0f895fb98ab9159f51fd0297e236d
|
8,c9f0f895fb98ab9159f51fd0297e236d
|
||||||
10,d3d9446802a44259755d38e6d163e820
|
10,d3d9446802a44259755d38e6d163e820
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --ok
|
|
||||||
0,cfcd208495d565ef66e7dff9f98764da
|
|
||||||
2,c81e728d9d4c2f636f067f89cc14862c
|
|
||||||
4,a87ff679a2f3e71d9181a67b7542122c
|
|
||||||
6,1679091c5a880faf6fb5e6087eb1b2dc
|
|
||||||
8,c9f0f895fb98ab9159f51fd0297e236d
|
|
||||||
10,d3d9446802a44259755d38e6d163e820
|
|
||||||
-- Check COPY TO as user without permissions. SET row_security TO OFF;
|
-- Check COPY TO as user without permissions. SET row_security TO OFF;
|
||||||
SET SESSION AUTHORIZATION rls_regress_user2;
|
SET SESSION AUTHORIZATION rls_regress_user2;
|
||||||
SET row_security TO OFF;
|
SET row_security TO OFF;
|
||||||
@ -2684,9 +2605,6 @@ ERROR: insufficient privilege to bypass row security.
|
|||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
||||||
ERROR: permission denied for relation copy_t
|
ERROR: permission denied for relation copy_t
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
|
||||||
ERROR: permission denied for relation copy_t
|
|
||||||
-- Check COPY relation TO; keep it just one row to avoid reordering issues
|
-- Check COPY relation TO; keep it just one row to avoid reordering issues
|
||||||
RESET SESSION AUTHORIZATION;
|
RESET SESSION AUTHORIZATION;
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
@ -2703,8 +2621,6 @@ COPY copy_rel_to TO STDOUT WITH DELIMITER ',';
|
|||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ',';
|
COPY copy_rel_to TO STDOUT WITH DELIMITER ',';
|
||||||
1,c4ca4238a0b923820dcc509a6f75849b
|
1,c4ca4238a0b923820dcc509a6f75849b
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ',';
|
|
||||||
-- Check COPY TO as user with permissions.
|
-- Check COPY TO as user with permissions.
|
||||||
SET SESSION AUTHORIZATION rls_regress_user1;
|
SET SESSION AUTHORIZATION rls_regress_user1;
|
||||||
SET row_security TO OFF;
|
SET row_security TO OFF;
|
||||||
@ -2712,8 +2628,6 @@ COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --fail - insufficient to bypass r
|
|||||||
ERROR: insufficient privilege to bypass row security.
|
ERROR: insufficient privilege to bypass row security.
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
|
||||||
-- Check COPY TO as user with permissions and BYPASSRLS
|
-- Check COPY TO as user with permissions and BYPASSRLS
|
||||||
SET SESSION AUTHORIZATION rls_regress_exempt_user;
|
SET SESSION AUTHORIZATION rls_regress_exempt_user;
|
||||||
SET row_security TO OFF;
|
SET row_security TO OFF;
|
||||||
@ -2721,8 +2635,6 @@ COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
|||||||
1,c4ca4238a0b923820dcc509a6f75849b
|
1,c4ca4238a0b923820dcc509a6f75849b
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
|
||||||
-- Check COPY TO as user without permissions. SET row_security TO OFF;
|
-- Check COPY TO as user without permissions. SET row_security TO OFF;
|
||||||
SET SESSION AUTHORIZATION rls_regress_user2;
|
SET SESSION AUTHORIZATION rls_regress_user2;
|
||||||
SET row_security TO OFF;
|
SET row_security TO OFF;
|
||||||
@ -2731,19 +2643,12 @@ ERROR: permission denied for relation copy_rel_to
|
|||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
||||||
ERROR: permission denied for relation copy_rel_to
|
ERROR: permission denied for relation copy_rel_to
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
|
||||||
ERROR: permission denied for relation copy_rel_to
|
|
||||||
-- Check COPY FROM as Superuser/owner.
|
-- Check COPY FROM as Superuser/owner.
|
||||||
RESET SESSION AUTHORIZATION;
|
RESET SESSION AUTHORIZATION;
|
||||||
SET row_security TO OFF;
|
SET row_security TO OFF;
|
||||||
COPY copy_t FROM STDIN; --ok
|
COPY copy_t FROM STDIN; --ok
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY copy_t FROM STDIN; --ok
|
COPY copy_t FROM STDIN; --ok
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
|
||||||
ERROR: COPY FROM not supported with row level security.
|
|
||||||
HINT: Use direct INSERT statements instead.
|
|
||||||
-- Check COPY FROM as user with permissions.
|
-- Check COPY FROM as user with permissions.
|
||||||
SET SESSION AUTHORIZATION rls_regress_user1;
|
SET SESSION AUTHORIZATION rls_regress_user1;
|
||||||
SET row_security TO OFF;
|
SET row_security TO OFF;
|
||||||
@ -2753,10 +2658,6 @@ SET row_security TO ON;
|
|||||||
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
||||||
ERROR: COPY FROM not supported with row level security.
|
ERROR: COPY FROM not supported with row level security.
|
||||||
HINT: Use direct INSERT statements instead.
|
HINT: Use direct INSERT statements instead.
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
|
||||||
ERROR: COPY FROM not supported with row level security.
|
|
||||||
HINT: Use direct INSERT statements instead.
|
|
||||||
-- Check COPY TO as user with permissions and BYPASSRLS
|
-- Check COPY TO as user with permissions and BYPASSRLS
|
||||||
SET SESSION AUTHORIZATION rls_regress_exempt_user;
|
SET SESSION AUTHORIZATION rls_regress_exempt_user;
|
||||||
SET row_security TO OFF;
|
SET row_security TO OFF;
|
||||||
@ -2765,10 +2666,6 @@ SET row_security TO ON;
|
|||||||
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
||||||
ERROR: COPY FROM not supported with row level security.
|
ERROR: COPY FROM not supported with row level security.
|
||||||
HINT: Use direct INSERT statements instead.
|
HINT: Use direct INSERT statements instead.
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
|
||||||
ERROR: COPY FROM not supported with row level security.
|
|
||||||
HINT: Use direct INSERT statements instead.
|
|
||||||
-- Check COPY FROM as user without permissions.
|
-- Check COPY FROM as user without permissions.
|
||||||
SET SESSION AUTHORIZATION rls_regress_user2;
|
SET SESSION AUTHORIZATION rls_regress_user2;
|
||||||
SET row_security TO OFF;
|
SET row_security TO OFF;
|
||||||
@ -2777,9 +2674,6 @@ ERROR: permission denied for relation copy_t
|
|||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY copy_t FROM STDIN; --fail - permission denied.
|
COPY copy_t FROM STDIN; --fail - permission denied.
|
||||||
ERROR: permission denied for relation copy_t
|
ERROR: permission denied for relation copy_t
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_t FROM STDIN; --fail - permission denied.
|
|
||||||
ERROR: permission denied for relation copy_t
|
|
||||||
RESET SESSION AUTHORIZATION;
|
RESET SESSION AUTHORIZATION;
|
||||||
DROP TABLE copy_t;
|
DROP TABLE copy_t;
|
||||||
DROP TABLE copy_rel_to CASCADE;
|
DROP TABLE copy_rel_to CASCADE;
|
||||||
@ -2932,16 +2826,17 @@ SELECT attname, most_common_vals FROM pg_stats
|
|||||||
-- Collation support
|
-- Collation support
|
||||||
--
|
--
|
||||||
BEGIN;
|
BEGIN;
|
||||||
SET row_security TO FORCE;
|
|
||||||
CREATE TABLE coll_t (c) AS VALUES ('bar'::text);
|
CREATE TABLE coll_t (c) AS VALUES ('bar'::text);
|
||||||
CREATE POLICY coll_p ON coll_t USING (c < ('foo'::text COLLATE "C"));
|
CREATE POLICY coll_p ON coll_t USING (c < ('foo'::text COLLATE "C"));
|
||||||
ALTER TABLE coll_t ENABLE ROW LEVEL SECURITY;
|
ALTER TABLE coll_t ENABLE ROW LEVEL SECURITY;
|
||||||
|
GRANT SELECT ON coll_t TO rls_regress_user0;
|
||||||
SELECT (string_to_array(polqual, ':'))[7] AS inputcollid FROM pg_policy WHERE polrelid = 'coll_t'::regclass;
|
SELECT (string_to_array(polqual, ':'))[7] AS inputcollid FROM pg_policy WHERE polrelid = 'coll_t'::regclass;
|
||||||
inputcollid
|
inputcollid
|
||||||
------------------
|
------------------
|
||||||
inputcollid 950
|
inputcollid 950
|
||||||
(1 row)
|
(1 row)
|
||||||
|
|
||||||
|
SET SESSION AUTHORIZATION rls_regress_user0;
|
||||||
SELECT * FROM coll_t;
|
SELECT * FROM coll_t;
|
||||||
c
|
c
|
||||||
-----
|
-----
|
||||||
@ -3008,7 +2903,6 @@ ROLLBACK; -- cleanup
|
|||||||
-- Converting table to view
|
-- Converting table to view
|
||||||
--
|
--
|
||||||
BEGIN;
|
BEGIN;
|
||||||
SET ROW_SECURITY = FORCE;
|
|
||||||
CREATE TABLE t (c int);
|
CREATE TABLE t (c int);
|
||||||
CREATE POLICY p ON t USING (c % 2 = 1);
|
CREATE POLICY p ON t USING (c % 2 = 1);
|
||||||
ALTER TABLE t ENABLE ROW LEVEL SECURITY;
|
ALTER TABLE t ENABLE ROW LEVEL SECURITY;
|
||||||
@ -3031,7 +2925,6 @@ ROLLBACK;
|
|||||||
-- Policy expression handling
|
-- Policy expression handling
|
||||||
--
|
--
|
||||||
BEGIN;
|
BEGIN;
|
||||||
SET row_security = FORCE;
|
|
||||||
CREATE TABLE t (c) AS VALUES ('bar'::text);
|
CREATE TABLE t (c) AS VALUES ('bar'::text);
|
||||||
CREATE POLICY p ON t USING (max(c)); -- fails: aggregate functions are not allowed in policy expressions
|
CREATE POLICY p ON t USING (max(c)); -- fails: aggregate functions are not allowed in policy expressions
|
||||||
ERROR: aggregate functions are not allowed in policy expressions
|
ERROR: aggregate functions are not allowed in policy expressions
|
||||||
|
@ -164,12 +164,6 @@ SET row_security TO ON;
|
|||||||
SELECT * FROM document;
|
SELECT * FROM document;
|
||||||
SELECT * FROM category;
|
SELECT * FROM category;
|
||||||
|
|
||||||
-- database superuser does not bypass RLS policy when FORCE enabled.
|
|
||||||
RESET SESSION AUTHORIZATION;
|
|
||||||
SET row_security TO FORCE;
|
|
||||||
SELECT * FROM document;
|
|
||||||
SELECT * FROM category;
|
|
||||||
|
|
||||||
-- database superuser does bypass RLS policy when disabled
|
-- database superuser does bypass RLS policy when disabled
|
||||||
RESET SESSION AUTHORIZATION;
|
RESET SESSION AUTHORIZATION;
|
||||||
SET row_security TO OFF;
|
SET row_security TO OFF;
|
||||||
@ -182,12 +176,6 @@ SET row_security TO OFF;
|
|||||||
SELECT * FROM document;
|
SELECT * FROM document;
|
||||||
SELECT * FROM category;
|
SELECT * FROM category;
|
||||||
|
|
||||||
-- RLS policy applies to table owner when FORCE enabled.
|
|
||||||
SET SESSION AUTHORIZATION rls_regress_user0;
|
|
||||||
SET row_security TO FORCE;
|
|
||||||
SELECT * FROM document;
|
|
||||||
SELECT * FROM category;
|
|
||||||
|
|
||||||
-- RLS policy does not apply to table owner when RLS enabled.
|
-- RLS policy does not apply to table owner when RLS enabled.
|
||||||
SET SESSION AUTHORIZATION rls_regress_user0;
|
SET SESSION AUTHORIZATION rls_regress_user0;
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
@ -966,17 +954,6 @@ SET SESSION AUTHORIZATION rls_regress_user0;
|
|||||||
SELECT * FROM t1;
|
SELECT * FROM t1;
|
||||||
EXPLAIN (COSTS OFF) SELECT * FROM t1;
|
EXPLAIN (COSTS OFF) SELECT * FROM t1;
|
||||||
|
|
||||||
-- Check that default deny does apply to superuser when RLS force.
|
|
||||||
SET row_security TO FORCE;
|
|
||||||
RESET SESSION AUTHORIZATION;
|
|
||||||
SELECT * FROM t1;
|
|
||||||
EXPLAIN (COSTS OFF) SELECT * FROM t1;
|
|
||||||
|
|
||||||
-- Check that default deny does apply to table owner when RLS force.
|
|
||||||
SET SESSION AUTHORIZATION rls_regress_user0;
|
|
||||||
SELECT * FROM t1;
|
|
||||||
EXPLAIN (COSTS OFF) SELECT * FROM t1;
|
|
||||||
|
|
||||||
-- Check that default deny applies to non-owner/non-superuser when RLS on.
|
-- Check that default deny applies to non-owner/non-superuser when RLS on.
|
||||||
SET SESSION AUTHORIZATION rls_regress_user1;
|
SET SESSION AUTHORIZATION rls_regress_user1;
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
@ -1007,8 +984,6 @@ SET row_security TO OFF;
|
|||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ',';
|
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ',';
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ',';
|
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ',';
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ',';
|
|
||||||
|
|
||||||
-- Check COPY TO as user with permissions.
|
-- Check COPY TO as user with permissions.
|
||||||
SET SESSION AUTHORIZATION rls_regress_user1;
|
SET SESSION AUTHORIZATION rls_regress_user1;
|
||||||
@ -1016,8 +991,6 @@ SET row_security TO OFF;
|
|||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --fail - insufficient to bypass rls
|
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --fail - insufficient to bypass rls
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --ok
|
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --ok
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --ok
|
|
||||||
|
|
||||||
-- Check COPY TO as user with permissions and BYPASSRLS
|
-- Check COPY TO as user with permissions and BYPASSRLS
|
||||||
SET SESSION AUTHORIZATION rls_regress_exempt_user;
|
SET SESSION AUTHORIZATION rls_regress_exempt_user;
|
||||||
@ -1025,8 +998,6 @@ SET row_security TO OFF;
|
|||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --ok
|
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --ok
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --ok
|
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --ok
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --ok
|
|
||||||
|
|
||||||
-- Check COPY TO as user without permissions. SET row_security TO OFF;
|
-- Check COPY TO as user without permissions. SET row_security TO OFF;
|
||||||
SET SESSION AUTHORIZATION rls_regress_user2;
|
SET SESSION AUTHORIZATION rls_regress_user2;
|
||||||
@ -1034,8 +1005,6 @@ SET row_security TO OFF;
|
|||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --fail - insufficient to bypass rls
|
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --fail - insufficient to bypass rls
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY (SELECT * FROM copy_t ORDER BY a ASC) TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
|
||||||
|
|
||||||
-- Check COPY relation TO; keep it just one row to avoid reordering issues
|
-- Check COPY relation TO; keep it just one row to avoid reordering issues
|
||||||
RESET SESSION AUTHORIZATION;
|
RESET SESSION AUTHORIZATION;
|
||||||
@ -1055,8 +1024,6 @@ SET row_security TO OFF;
|
|||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ',';
|
COPY copy_rel_to TO STDOUT WITH DELIMITER ',';
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ',';
|
COPY copy_rel_to TO STDOUT WITH DELIMITER ',';
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ',';
|
|
||||||
|
|
||||||
-- Check COPY TO as user with permissions.
|
-- Check COPY TO as user with permissions.
|
||||||
SET SESSION AUTHORIZATION rls_regress_user1;
|
SET SESSION AUTHORIZATION rls_regress_user1;
|
||||||
@ -1064,8 +1031,6 @@ SET row_security TO OFF;
|
|||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --fail - insufficient to bypass rls
|
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --fail - insufficient to bypass rls
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
|
||||||
|
|
||||||
-- Check COPY TO as user with permissions and BYPASSRLS
|
-- Check COPY TO as user with permissions and BYPASSRLS
|
||||||
SET SESSION AUTHORIZATION rls_regress_exempt_user;
|
SET SESSION AUTHORIZATION rls_regress_exempt_user;
|
||||||
@ -1073,8 +1038,6 @@ SET row_security TO OFF;
|
|||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --ok
|
|
||||||
|
|
||||||
-- Check COPY TO as user without permissions. SET row_security TO OFF;
|
-- Check COPY TO as user without permissions. SET row_security TO OFF;
|
||||||
SET SESSION AUTHORIZATION rls_regress_user2;
|
SET SESSION AUTHORIZATION rls_regress_user2;
|
||||||
@ -1082,8 +1045,6 @@ SET row_security TO OFF;
|
|||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_rel_to TO STDOUT WITH DELIMITER ','; --fail - permission denied
|
|
||||||
|
|
||||||
-- Check COPY FROM as Superuser/owner.
|
-- Check COPY FROM as Superuser/owner.
|
||||||
RESET SESSION AUTHORIZATION;
|
RESET SESSION AUTHORIZATION;
|
||||||
@ -1101,8 +1062,6 @@ COPY copy_t FROM STDIN; --ok
|
|||||||
3 cde
|
3 cde
|
||||||
4 def
|
4 def
|
||||||
\.
|
\.
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
|
||||||
|
|
||||||
-- Check COPY FROM as user with permissions.
|
-- Check COPY FROM as user with permissions.
|
||||||
SET SESSION AUTHORIZATION rls_regress_user1;
|
SET SESSION AUTHORIZATION rls_regress_user1;
|
||||||
@ -1110,8 +1069,6 @@ SET row_security TO OFF;
|
|||||||
COPY copy_t FROM STDIN; --fail - insufficient privilege to bypass rls.
|
COPY copy_t FROM STDIN; --fail - insufficient privilege to bypass rls.
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
|
||||||
|
|
||||||
-- Check COPY TO as user with permissions and BYPASSRLS
|
-- Check COPY TO as user with permissions and BYPASSRLS
|
||||||
SET SESSION AUTHORIZATION rls_regress_exempt_user;
|
SET SESSION AUTHORIZATION rls_regress_exempt_user;
|
||||||
@ -1124,8 +1081,6 @@ COPY copy_t FROM STDIN; --ok
|
|||||||
\.
|
\.
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_t FROM STDIN; --fail - COPY FROM not supported by RLS.
|
|
||||||
|
|
||||||
-- Check COPY FROM as user without permissions.
|
-- Check COPY FROM as user without permissions.
|
||||||
SET SESSION AUTHORIZATION rls_regress_user2;
|
SET SESSION AUTHORIZATION rls_regress_user2;
|
||||||
@ -1133,8 +1088,6 @@ SET row_security TO OFF;
|
|||||||
COPY copy_t FROM STDIN; --fail - permission denied.
|
COPY copy_t FROM STDIN; --fail - permission denied.
|
||||||
SET row_security TO ON;
|
SET row_security TO ON;
|
||||||
COPY copy_t FROM STDIN; --fail - permission denied.
|
COPY copy_t FROM STDIN; --fail - permission denied.
|
||||||
SET row_security TO FORCE;
|
|
||||||
COPY copy_t FROM STDIN; --fail - permission denied.
|
|
||||||
|
|
||||||
RESET SESSION AUTHORIZATION;
|
RESET SESSION AUTHORIZATION;
|
||||||
DROP TABLE copy_t;
|
DROP TABLE copy_t;
|
||||||
@ -1212,11 +1165,12 @@ SELECT attname, most_common_vals FROM pg_stats
|
|||||||
-- Collation support
|
-- Collation support
|
||||||
--
|
--
|
||||||
BEGIN;
|
BEGIN;
|
||||||
SET row_security TO FORCE;
|
|
||||||
CREATE TABLE coll_t (c) AS VALUES ('bar'::text);
|
CREATE TABLE coll_t (c) AS VALUES ('bar'::text);
|
||||||
CREATE POLICY coll_p ON coll_t USING (c < ('foo'::text COLLATE "C"));
|
CREATE POLICY coll_p ON coll_t USING (c < ('foo'::text COLLATE "C"));
|
||||||
ALTER TABLE coll_t ENABLE ROW LEVEL SECURITY;
|
ALTER TABLE coll_t ENABLE ROW LEVEL SECURITY;
|
||||||
|
GRANT SELECT ON coll_t TO rls_regress_user0;
|
||||||
SELECT (string_to_array(polqual, ':'))[7] AS inputcollid FROM pg_policy WHERE polrelid = 'coll_t'::regclass;
|
SELECT (string_to_array(polqual, ':'))[7] AS inputcollid FROM pg_policy WHERE polrelid = 'coll_t'::regclass;
|
||||||
|
SET SESSION AUTHORIZATION rls_regress_user0;
|
||||||
SELECT * FROM coll_t;
|
SELECT * FROM coll_t;
|
||||||
ROLLBACK;
|
ROLLBACK;
|
||||||
|
|
||||||
@ -1268,7 +1222,6 @@ ROLLBACK; -- cleanup
|
|||||||
-- Converting table to view
|
-- Converting table to view
|
||||||
--
|
--
|
||||||
BEGIN;
|
BEGIN;
|
||||||
SET ROW_SECURITY = FORCE;
|
|
||||||
CREATE TABLE t (c int);
|
CREATE TABLE t (c int);
|
||||||
CREATE POLICY p ON t USING (c % 2 = 1);
|
CREATE POLICY p ON t USING (c % 2 = 1);
|
||||||
ALTER TABLE t ENABLE ROW LEVEL SECURITY;
|
ALTER TABLE t ENABLE ROW LEVEL SECURITY;
|
||||||
@ -1293,7 +1246,6 @@ ROLLBACK;
|
|||||||
-- Policy expression handling
|
-- Policy expression handling
|
||||||
--
|
--
|
||||||
BEGIN;
|
BEGIN;
|
||||||
SET row_security = FORCE;
|
|
||||||
CREATE TABLE t (c) AS VALUES ('bar'::text);
|
CREATE TABLE t (c) AS VALUES ('bar'::text);
|
||||||
CREATE POLICY p ON t USING (max(c)); -- fails: aggregate functions are not allowed in policy expressions
|
CREATE POLICY p ON t USING (max(c)); -- fails: aggregate functions are not allowed in policy expressions
|
||||||
ROLLBACK;
|
ROLLBACK;
|
||||||
|
Loading…
Reference in New Issue
Block a user