]> granicus.if.org Git - postgresql/commit
Remove the SECURITY_ROW_LEVEL_DISABLED security context bit.
authorNoah Misch <noah@leadboat.com>
Mon, 21 Sep 2015 00:47:17 +0000 (20:47 -0400)
committerNoah Misch <noah@leadboat.com>
Mon, 21 Sep 2015 00:47:17 +0000 (20:47 -0400)
commit7f11724bd61b420acb2839908d51674e86e52034
tree56a0ce91220551a005955e849bddaa335be3c38f
parent537bd178c73b1d25938347b17e9e3e62898fc231
Remove the SECURITY_ROW_LEVEL_DISABLED security context bit.

This commit's parent made superfluous the bit's sole usage.  Referential
integrity checks have long run as the subject table's owner, and that
now implies RLS bypass.  Safe use of the bit was tricky, requiring
strict control over the SQL expressions evaluating therein.  Back-patch
to 9.5, where the bit was introduced.

Based on a patch by Stephen Frost.
src/backend/utils/adt/ri_triggers.c
src/backend/utils/cache/plancache.c
src/backend/utils/init/miscinit.c
src/backend/utils/misc/rls.c
src/include/miscadmin.h
src/include/utils/plancache.h