From: Stephen Frost <sfrost@snowman.net>
To: pgsql-hackers <pgsql-hackers@postgresql.org>
Subject: Row-Level Security
Date: Sat, 12 Dec 2009 15:30:03 -0500
Message-ID: <20091212203003.GL17756@tamriel.snowman.net> (raw)
Greetings,
> I'll start a new thread on this specific topic to hopefully pull out
> anyone who's focus is more on that than on SEPG.
Row-Level security has been implemented in a number of existing
commercial databases. There exists an implementation of row-level
security for PostgreSQL today in the form of SEPostgres.
I believe there is a signfigant user base who would like RLS without
SELinux (or perhaps with some other security manager). As it is a
useful feature indepenent of SELinux, it should be implemented in a way
which doesn't depend on SELinux in any way.
I've started a wiki page to discuss this here:
http://wiki.postgresql.org/wiki/RLS
I'd like to start a discussion about RLS for PG- design, user-interface,
syntax, capabilities, on-disk format changes, etc. For starters, I
think we shoud review the existing RLS implementations. To that end,
I've added a number of articles about them to the wiki. I think the
next step is to start summarizing how those operate and important
similarities and differences between them. Our goal, of course, is to
take the best of what's out there.
Please comment, update the wiki, let us know you're interested in this..
Thanks!
Stephen
Attachments:
[application/pgp-signature] signature.asc (196B, ../20091212203003.GL17756@tamriel.snowman.net/2-signature.asc)
download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: sfrost@snowman.net
Subject: Re: Row-Level Security
In-Reply-To: <20091212203003.GL17756@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox