From: KaiGai Kohei <kaigai@ak.jp.nec.com>
To: Robert Haas <robertmhaas@gmail.com>
Cc: Martijn van Oosterhout <kleptog@svana.org>
Cc: Greg Stark <stark@enterprisedb.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Heikki Linnakangas <heikki.linnakangas@enterprisedb.com>
Cc: KaiGai Kohei <kaigai@kaigai.gr.jp>
Cc: pgsql-hackers@postgresql.org
Subject: Re: [PATCH] unalias of ACL_SELECT_FOR_UPDATE
Date: Mon, 11 May 2009 11:35:30 +0900
Message-ID: <4A078EF2.4030308@ak.jp.nec.com> (raw)
In-Reply-To: <603c8f070904211831g2c0ace4bycf4baf27812ce8fe@mail.gmail.com>
References: <49E9D5B6.9050406@enterprisedb.com>
<49EBC588.4090807@ak.jp.nec.com>
<49EC0B94.6070107@enterprisedb.com>
<49EC198F.6090604@ak.jp.nec.com>
<5233.1240236841@sss.pgh.pa.us>
<4136ffa0904200748k67a6058bue08c233a745317bc@mail.gmail.com>
<20090420164800.GC29747@calyx.svana.org>
<603c8f070904201137p72d805ai6b75c70ee8c31bfd@mail.gmail.com>
<49ED12B2.5030408@ak.jp.nec.com>
<49EE5E34.1010200@ak.jp.nec.com>
<603c8f070904211831g2c0ace4bycf4baf27812ce8fe@mail.gmail.com>
Robert Haas wrote:
> 2009/4/21 KaiGai Kohei <kaigai@ak.jp.nec.com>:
>> Robert, currently I could not find semantics breaks in your suggestion.
>> I plan to update SE- implementation to skip checks during foreign-key
>> constraints and add a new SE- permission: "reference" which allows
>> to set up fereign-keys.
>
> Sounds good! I hope that works out for you!
Robert,
I found a concern for the approach apart from the original matter.
When a FK constraint has ON UPDATE CASCADE rule and the security
policy allows someone to update the PK table, it can allow them
to update read-only FK table.
It might or not be a matter depending on the point of view.
If we consider setting up of FK constraint is a very sensitive
operation as much as loaing C-libraries, it can be fair enough.
(Because we assume SE-PostgreSQL does not checks actions from
internal features which are installed by limited number of DBAs.)
However, I don't think CREATE TABLE with FK constraint should be
restricted to the limited number of DBAs. It will give demerits
from the aspects of usability.
So, I reconsidered that SE-PostgreSQL should checks secondary
queries in FK constraints as the older version doing.
Fortunately, the original matter can be solved in other approach.
This change does not give us any design impact.
Thanks,
--
OSS Platform Development Division, NEC
KaiGai Kohei <kaigai@ak.jp.nec.com>
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: kaigai@ak.jp.nec.com, robertmhaas@gmail.com, kleptog@svana.org, stark@enterprisedb.com, tgl@sss.pgh.pa.us, heikki.linnakangas@enterprisedb.com, kaigai@kaigai.gr.jp
Subject: Re: [PATCH] unalias of ACL_SELECT_FOR_UPDATE
In-Reply-To: <4A078EF2.4030308@ak.jp.nec.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox