diff options
| author | Dean Rasheed | 2017-11-24 14:14:40 +0000 |
|---|---|---|
| committer | Dean Rasheed | 2017-11-24 14:14:40 +0000 |
| commit | 9c55391f0f277318c754f89950e65363ede4136e (patch) | |
| tree | c17e7bfb5d8eda97e08895e67677a5d55ff6d163 /src/backend/rewrite/rowsecurity.c | |
| parent | 26329ad8dcc78eb651ab61f6b17c4f5f7bb77323 (diff) | |
RLS comment fixes.
The comments in get_policies_for_relation() say that CREATE POLICY
does not support defining restrictive policies. This is no longer
true, starting from PG10.
Diffstat (limited to 'src/backend/rewrite/rowsecurity.c')
| -rw-r--r-- | src/backend/rewrite/rowsecurity.c | 8 |
1 files changed, 2 insertions, 6 deletions
diff --git a/src/backend/rewrite/rowsecurity.c b/src/backend/rewrite/rowsecurity.c index a0cd6b1075d..5bd33f7ba41 100644 --- a/src/backend/rewrite/rowsecurity.c +++ b/src/backend/rewrite/rowsecurity.c @@ -408,11 +408,7 @@ get_policies_for_relation(Relation relation, CmdType cmd, Oid user_id, *permissive_policies = NIL; *restrictive_policies = NIL; - /* - * First find all internal policies for the relation. CREATE POLICY does - * not currently support defining restrictive policies, so for now all - * internal policies are permissive. - */ + /* First find all internal policies for the relation. */ foreach(item, relation->rd_rsdesc->policies) { bool cmd_matches = false; @@ -450,7 +446,7 @@ get_policies_for_relation(Relation relation, CmdType cmd, Oid user_id, } /* - * Add this policy to the list of permissive policies if it applies to + * Add this policy to the relevant list of policies if it applies to * the specified role. */ if (cmd_matches && check_role_for_policy(policy->roles, user_id)) |