agora inbox for pgsql-docs@postgresql.org  
help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Laurenz Albe <laurenz.albe@cybertec.at>
Cc: Patrick Stählin <me@packi.ch>
Cc: pgsql-docs@lists.postgresql.org
Subject: Re: Add sentence about SECURITY LABEL object ownership
Date: Thu, 05 Jun 2025 11:19:02 -0400
Message-ID: <1284778.1749136742@sss.pgh.pa.us> (raw)
In-Reply-To: <2c8f7b87b68fd2084faebdcf48b4edb23f4e93e0.camel@cybertec.at>
References: <931e012a-57ba-41ba-9b88-24323a46dec5@packi.ch>
	<2c8f7b87b68fd2084faebdcf48b4edb23f4e93e0.camel@cybertec.at>

Laurenz Albe <laurenz.albe@cybertec.at> writes:
> On Thu, 2025-06-05 at 15:29 +0200, Patrick Stählin wrote:
>> I noticed that we don't document that you need to own the object being 
>> modified by SECURITY LABEL.

Yeah, clearly a documentation oversight.

> Wouldn't it be more accurate to say that you have to be a member of the owning role?
> But perhaps that would be complicated enough to confuse many users.
> In general, +1 for documenting that.

Our standard boilerplate for this is, eg,

   You must own the table to use <command>ALTER TABLE</command>.

I don't see a reason to do it differently here.

			regards, tom lane





view thread (5+ messages)  latest in thread

Message-ID: <1284778.1749136742@sss.pgh.pa.us>
Permalink:  ../1284778.1749136742@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/1284778.1749136742@sss.pgh.pa.us

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-docs@postgresql.org
  Cc: tgl@sss.pgh.pa.us, laurenz.albe@cybertec.at, me@packi.ch, pgsql-docs@lists.postgresql.org
  Subject: Re: Add sentence about SECURITY LABEL object ownership
  In-Reply-To: <1284778.1749136742@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox