Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStephen Frost2015-08-03 19:32:49 +0000
committerStephen Frost2015-08-03 19:32:49 +0000
commitdee0200f0276c0f9da930a2c926f90f5615f2d64 (patch)
treeeae2bb8d8694ae6bd2efd6faaa37d035cb79fd1e /src/backend/regex
parentecc2d16bc97d160d3b4beecfc46676bbaaf157a5 (diff)
RLS: Keep deny policy when only restrictive exist
Only remove the default deny policy when a permissive policy exists (either from the hook or defined by the user). If only restrictive policies exist then no rows will be visible, as restrictive policies shouldn't make rows visible. To address this requirement, a single "USING (true)" permissive policy can be created. Update the test_rls_hooks regression tests to create the necessary "USING (true)" permissive policy. Back-patch to 9.5 where RLS was added. Per discussion with Dean.
Diffstat (limited to 'src/backend/regex')
0 files changed, 0 insertions, 0 deletions