Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1VHEYL-0004JM-5K for pgsql-hackers@arkaria.postgresql.org; Wed, 04 Sep 2013 14:59:29 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.80) (envelope-from ) id 1VHEYK-0002SS-9l for pgsql-hackers@arkaria.postgresql.org; Wed, 04 Sep 2013 14:59:28 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1VHEYG-0002Ms-LT for pgsql-hackers@postgresql.org; Wed, 04 Sep 2013 14:59:24 +0000 Received: from tamriel.snowman.net ([2001:4830:167b::11]) by magus.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1VHEYD-0004AZ-1z for pgsql-hackers@postgresql.org; Wed, 04 Sep 2013 14:59:23 +0000 Received: by tamriel.snowman.net (Postfix, from userid 1000) id B57155F773; Wed, 4 Sep 2013 11:01:19 -0400 (EDT) Date: Wed, 4 Sep 2013 11:01:19 -0400 From: Stephen Frost To: Robert Haas Cc: Greg Smith , Greg Stark , Kohei KaiGai , Josh Berkus , "ktm@rice.edu" , Alexander Korotkov , Oleg Bartunov , PgHacker Subject: Re: [v9.4] row level security Message-ID: <20130904150119.GD2706@tamriel.snowman.net> References: <5220D832.7090104@agliodbs.com> <52238206.2060705@agliodbs.com> <52240A43.3000100@2ndQuadrant.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="dkWwKnFl3UsUtmKa" Content-Disposition: inline In-Reply-To: X-Editor: Vim http://www.vim.org/ X-Info: http://www.snowman.net X-Operating-System: Linux/3.8.0-25-generic (x86_64) X-Uptime: 10:59:37 up 53 days, 11:09, 6 users, load average: 0.18, 0.11, 0.07 User-Agent: Mutt/1.5.21 (2010-09-15) X-Pg-Spam-Score: -4.3 (----) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org --dkWwKnFl3UsUtmKa Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable * Robert Haas (robertmhaas@gmail.com) wrote: > On Sun, Sep 1, 2013 at 11:47 PM, Greg Smith wrote: > > And if someone can INSERT values that they can't actually see once they= 're > > committed, that's a similarly bad we should describe. >=20 > This is desirable in some cases but not others. If the goal is > compartmentalization, then it's sensible to prevent this. But you > might also have a "drop-box" environment - e.g. a student submits > coursework to a professor, and can't access the submitted work after > it's submitted. FWIW, my CS classes in college had a tool that worked > just this way. Agreed, and part of the discussion that I had w/ KaiGai and Simon was that we should provide a way to let the user pick which they'd like. This is the concept around 'insert privileges' being different from 'select privileges' wrt RLS. > The point is that we should be in the business of providing mechanism, > not policy. ++ Thanks, Stephen --dkWwKnFl3UsUtmKa Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlInSz8ACgkQrzgMPqB3kijl8ACfebev42jJL9Pdugnl7/2/BAWp tg0AnisOSWFWj0Mf0DtUxUFMdhqC50ka =3KjI -----END PGP SIGNATURE----- --dkWwKnFl3UsUtmKa--