From: PG Doc comments form <noreply@postgresql.org>
To: pgsql-docs@lists.postgresql.org
Cc: alanfairless@gmail.com
Subject: More obvious clarification is needed about how RLS interacts with views
Date: Thu, 13 Jun 2019 19:52:57 +0000
Message-ID: <156045557781.1350.3998342005368853619@wrigleys.postgresql.org> (raw)
The following documentation comment has been logged on the website:
Page: https://www.postgresql.org/docs/11/sql-createpolicy.html
Description:
It's not clear enough from reading the documentation on RLS security policy
that schema designers need to pay special attention to views and their
ownership. (Views will bypass RLS security in the common case that they are
owned by a super user.) I have seen this misunderstanding lead to
unexpected data exposure.
This *is* clarified at the very bottom of the Notes section on the `create
policy` document, but I believe it justifies having a clear and prominent
call out. Thank you!
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: noreply@postgresql.org, pgsql-docs@lists.postgresql.org, alanfairless@gmail.com
Subject: Re: More obvious clarification is needed about how RLS interacts with views
In-Reply-To: <156045557781.1350.3998342005368853619@wrigleys.postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox