]> granicus.if.org Git - postgresql/commit
Remove the SECURITY_ROW_LEVEL_DISABLED security context bit.
authorNoah Misch <noah@leadboat.com>
Mon, 21 Sep 2015 00:47:17 +0000 (20:47 -0400)
committerNoah Misch <noah@leadboat.com>
Mon, 21 Sep 2015 00:47:36 +0000 (20:47 -0400)
commitbbdb9dfbc3c722b4c811c5cbfa03ce79b7b74824
tree1bdc39a0ecc726a76586c92c412dd06a6b243cdf
parent6dae6edcd88cf3be06acf247c10de925bc065274
Remove the SECURITY_ROW_LEVEL_DISABLED security context bit.

This commit's parent made superfluous the bit's sole usage.  Referential
integrity checks have long run as the subject table's owner, and that
now implies RLS bypass.  Safe use of the bit was tricky, requiring
strict control over the SQL expressions evaluating therein.  Back-patch
to 9.5, where the bit was introduced.

Based on a patch by Stephen Frost.
src/backend/utils/adt/ri_triggers.c
src/backend/utils/cache/plancache.c
src/backend/utils/init/miscinit.c
src/backend/utils/misc/rls.c
src/include/miscadmin.h
src/include/utils/plancache.h