Re: BUG #15708: RLS 'using' running as wrong user when called from a view

From: Daurnimator <quae(at)daurnimator(dot)com>
To: Dean Rasheed <dean(dot)a(dot)rasheed(at)gmail(dot)com>
Cc: Stephen Frost <sfrost(at)snowman(dot)net>, pgsql-bugs(at)lists(dot)postgresql(dot)org, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: BUG #15708: RLS 'using' running as wrong user when called from a view
Date: 2019-04-29 03:56:02
Message-ID: CAEnbY+c+Q6EbA_WP_4JcFpxX7fanbeMYOOiOaChr5vWvnke3xQ@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs pgsql-hackers

On Wed, 27 Mar 2019 at 23:46, Dean Rasheed <dean(dot)a(dot)rasheed(at)gmail(dot)com> wrote:
> On second thoughts, it actually needs to be in
> get_row_security_policies(), after making copies of the quals from the
> policies, otherwise it would be scribbling on the copies from the
> relcache. Actually that makes the code change a bit simpler too.

Thanks for writing the patch!

I'm sad this missed the last commit fest; I think this bug might be
causing security issues in a few deployments.
Could you submit the patch for the next commit fest?

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Flo Rance 2019-04-29 06:51:50 Re: Reg: Postgresql8.3 Using on Ubuntu
Previous Message Tatsuo Ishii 2019-04-28 22:01:34 Re: BUG #15706: Support Services page out of date,Re: BUG #15706: Support Services page out of date,Re: BUG #15706: Support Services page out of date,Re: BUG #15706: Support Services page out of date,Re: BUG #15706: Support Services page out of date,Re: BUG #15706: Support Services page out of date,Re: BUG #15706: Support Services page out of date,Re: BUG #15706: Support Services page out of date

Browse pgsql-hackers by date

  From Date Subject
Next Message David Fetter 2019-04-29 03:58:47 Re: [PATCH v5] Show detailed table persistence in \dt+
Previous Message Avinash Kumar 2019-04-29 03:28:31 Do you see any problems with this procedure for Old Master rebuild as a Slave upon switchover ?