From: PG Doc comments form <noreply@postgresql.org>
To: pgsql-docs@lists.postgresql.org
Cc: wstrzalka@gmail.com
Subject: pg_stats entries visibility with RLS enabled
Date: Fri, 08 Dec 2023 16:45:48 +0000
Message-ID: <170205394886.398198.4628897348940629963@wrigleys.postgresql.org> (raw)
The following documentation comment has been logged on the website:
Page: https://www.postgresql.org/docs/16/view-pg-stats.html
Description:
First paragraph for the pg_stats view says: "This view allows access only to
rows of pg_statistic that correspond to tables the user has permission to
read, and therefore it is safe to allow public read access to this view."
I think it would be worth to mention that with RLS enabled for the table the
rows will also be hidden to not reveal values from the rows not visible to
the user.
Wojtek
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: noreply@postgresql.org, pgsql-docs@lists.postgresql.org, wstrzalka@gmail.com
Subject: Re: pg_stats entries visibility with RLS enabled
In-Reply-To: <170205394886.398198.4628897348940629963@wrigleys.postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox