From:
KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
To:
Robert Haas <robertmhaas(at)gmail(dot)com>
Cc:
Heikki Linnakangas <heikki(dot)linnakangas(at)enterprisedb(dot)com>,
KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp>, pgsql-hackers(at)postgresql(dot)org
Subject:
Re: leaky views, yet again
Date:
2010-09-02 03:25:36
Message-ID:
4C7F1930.1010101@ak.jp.nec.com (view raw or flat )
Thread:
2010-07-08 13:08:41 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-07-09 03:47:51 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-07-19 17:08:21 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-07-19 17:19:30 from Heikki Linnakangas <heikki(dot)linnakangas(at)enterprisedb(dot)com>
2010-07-19 17:47:23 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-07-21 05:41:52 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-07-21 10:26:43 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-07-21 10:35:58 from KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp>
2010-09-01 08:37:57 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-09-02 02:57:08 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-09-02 03:25:36 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-09-02 03:38:43 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-09-02 04:30:03 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-09-02 07:33:52 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-09-06 04:51:42 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-10-05 09:01:45 from Itagaki Takahiro <itagaki(dot)takahiro(at)gmail(dot)com>
2010-10-05 09:32:03 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-10-05 14:16:10 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-05 14:27:09 from KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp>
2010-10-05 14:39:21 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-05 14:56:45 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2010-10-05 15:28:57 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-05 16:27:12 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2010-10-05 16:31:56 from "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>
2010-10-05 17:03:45 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-05 17:29:06 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2010-10-05 18:01:25 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-05 18:08:15 from Greg Stark <gsstark(at)mit(dot)edu>
2010-10-05 18:15:20 from Stephen Frost <sfrost(at)snowman(dot)net>
2010-10-05 18:20:52 from Heikki Linnakangas <heikki(dot)linnakangas(at)enterprisedb(dot)com>
2010-10-05 18:48:08 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2010-10-05 19:06:14 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-06 00:29:59 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-10-05 19:15:39 from Heikki Linnakangas <heikki(dot)linnakangas(at)enterprisedb(dot)com>
2010-10-06 00:53:43 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-10-05 18:49:43 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-05 18:59:43 from "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>
2010-10-05 18:46:02 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2010-10-05 19:24:45 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2010-10-05 19:42:11 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2010-10-05 20:25:10 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2010-10-05 20:37:40 from bricklen <bricklen(at)gmail(dot)com>
2010-10-05 20:55:24 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2010-10-05 20:59:18 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2010-10-05 20:50:49 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-07 03:39:50 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-07 06:02:43 from Heikki Linnakangas <heikki(dot)linnakangas(at)enterprisedb(dot)com>
2010-10-07 12:24:42 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-07 13:10:22 from Stephen Frost <sfrost(at)snowman(dot)net>
2010-10-07 13:17:07 from Heikki Linnakangas <heikki(dot)linnakangas(at)enterprisedb(dot)com>
2010-10-07 13:23:27 from Stephen Frost <sfrost(at)snowman(dot)net>
2010-10-08 07:19:02 from Dimitri Fontaine <dimitri(at)2ndQuadrant(dot)fr>
2010-10-07 13:19:28 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-07 13:27:31 from Stephen Frost <sfrost(at)snowman(dot)net>
2010-10-05 17:31:54 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2010-10-05 15:33:09 from KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp>
2010-10-05 15:49:23 from KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp>
2010-10-06 08:01:05 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-10-12 06:10:02 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-10-13 06:29:00 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-13 13:43:04 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2010-10-13 14:34:04 from KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp>
2010-10-13 15:25:40 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2010-10-13 15:45:51 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2010-10-13 16:18:08 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-13 16:52:43 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2010-10-18 09:02:00 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-10-18 13:11:17 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-19 08:34:08 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-10-19 12:31:21 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-19 13:22:13 from KaiGai Kohei <kaigai(at)kaigai(dot)gr(dot)jp>
2010-10-19 14:41:08 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2010-10-20 01:36:38 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-20 14:00:40 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2010-10-20 14:49:37 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-13 16:15:23 from Robert Haas <robertmhaas(at)gmail(dot)com>
2010-10-13 17:19:27 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2010-10-13 19:16:49 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2010-07-19 17:13:44 from Heikki Linnakangas <heikki(dot)linnakangas(at)enterprisedb(dot)com>
2010-07-21 04:58:49 from KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
2010-07-21 10:25:39 from Robert Haas <robertmhaas(at)gmail(dot)com>
Lists:
pgsql-hackers
(2010/09/02 11:57), Robert Haas wrote:
> 2010/9/1 KaiGai Kohei<kaigai(at)ak(dot)jp(dot)nec(dot)com>:
>> Right now, it stands on a strict assumption that considers operators
>> implemented with built-in functions are safe; it does not have no
>> possibility to leak supplied arguments anywhere.
>>
>> Please note that this patch does not case about a case when
>> a function inside a view and a function outside a view are
>> distributed into same level and the later function has lower
>> cost value.
>
> Without making some attempt to address these two points, I don't see
> the point of this patch.
>
> Also, I believe we decided previously do this deoptimization only in
> case the user requests it with CREATE SECURITY VIEW.
>
Perhaps, I remember the previous discussion incorrectly.
If we have a hint about whether the supplied view is intended to security
purpose, or not, it seems to me it is a reliable method to prevent pulling
up the subqueries come from security views.
Is it too much deoptimization?
If we keep security views as subqueries, the later point shall be solved
implicitly. Even if we try to optimize security views in a certain level,
it is not difficult to solve, as I demonstrated before.
Thanks,
--
KaiGai Kohei <kaigai(at)ak(dot)jp(dot)nec(dot)com>
In response to
Responses
pgsql-hackers by date
Next :From: Robert HaasDate: 2010-09-02 03:38:43Subject : Re: leaky views, yet againPrevious :From : Robert HaasDate : 2010-09-02 03:13:30Subject : Re: git: uh-oh
