Date: Sat, 12 Dec 2009 15:30:03 -0500
From: Stephen Frost <sfrost@snowman.net>
To: pgsql-hackers <pgsql-hackers@postgresql.org>
Subject: Row-Level Security
Message-ID: <20091212203003.GL17756@tamriel.snowman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="LY1NsoLvzY7ULKdc"
Content-Disposition: inline
User-Agent: Mutt/1.5.18 (2008-05-17)


--LY1NsoLvzY7ULKdc
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Greetings,

> I'll start a new thread on this specific topic to hopefully pull out
> anyone who's focus is more on that than on SEPG.

Row-Level security has been implemented in a number of existing
commercial databases.  There exists an implementation of row-level
security for PostgreSQL today in the form of SEPostgres.
I believe there is a signfigant user base who would like RLS without
SELinux (or perhaps with some other security manager).  As it is a
useful feature indepenent of SELinux, it should be implemented in a way
which doesn't depend on SELinux in any way.

I've started a wiki page to discuss this here:
http://wiki.postgresql.org/wiki/RLS

I'd like to start a discussion about RLS for PG- design, user-interface,
syntax, capabilities, on-disk format changes, etc.  For starters, I
think we shoud review the existing RLS implementations.  To that end,
I've added a number of articles about them to the wiki.  I think the
next step is to start summarizing how those operate and important
similarities and differences between them.  Our goal, of course, is to
take the best of what's out there.

Please comment, update the wiki, let us know you're interested in this..=20

	Thanks!

		Stephen

--LY1NsoLvzY7ULKdc
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAksj/UsACgkQrzgMPqB3kihiugCfbNxOalho24WIdHr26fabUkTL
+c0AnipscmS4euo76SWb3/BzRrn4IWrd
=WELk
-----END PGP SIGNATURE-----

--LY1NsoLvzY7ULKdc--