Received: from malur.postgresql.org ([217.196.149.56])
 by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from
 <pgsql-hackers-owner+M240230=pgsql-hackers-arkari@postgresql.org>)
 id 1VtChJ-000888-Su
 for pgsql-hackers@arkaria.postgresql.org; Wed, 18 Dec 2013 08:41:42 +0000
Received: from localhost ([127.0.0.1] helo=postgresql.org)
 by malur.postgresql.org with smtp (Exim 4.80) (envelope-from
 <pgsql-hackers-owner+M240230=pgsql-hackers-arkari@postgresql.org>)
 id 1VtChJ-0003h3-Bm
 for pgsql-hackers@arkaria.postgresql.org; Wed, 18 Dec 2013 08:41:41 +0000
Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29])
 by malur.postgresql.org with esmtp (Exim 4.80)
 (envelope-from <yebhavinga@gmail.com>) id 1VtChI-0003gt-0W
 for pgsql-hackers@postgresql.org; Wed, 18 Dec 2013 08:41:40 +0000
Received: from mail-we0-x22b.google.com ([2a00:1450:400c:c03::22b])
 by magus.postgresql.org with esmtp (Exim 4.80)
 (envelope-from <yebhavinga@gmail.com>) id 1VtChE-00038L-4l
 for pgsql-hackers@postgresql.org; Wed, 18 Dec 2013 08:41:39 +0000
Received: by mail-we0-f171.google.com with SMTP id q58so7232938wes.30
 for <pgsql-hackers@postgresql.org>; Wed, 18 Dec 2013 00:41:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=message-id:date:from:user-agent:mime-version:to:cc:subject
 :references:in-reply-to:content-type:content-transfer-encoding;
 bh=X8eS5rROHJU6g/vujRtkj8qshC/ByhOnUJ5Soadukn8=;
 b=fb4tVFolF523RarZXq7AWqtoOfn7O4sDqAs6MaTsgJ7yrpdfvdCDG6tHTiaCJZ0NdU
 UpIfauuPAyK3X6jsVj5BvvPM2n5oKpV8TV4674CG8WVlnAfWMz1LQndkAMJndBXhaSuU
 /SwaP2pBDjGaHEGrJ8F91tBRck1TIdoM+mURqKKJb5fEcOW0frmuIBNibIiYmJ3CyLE+
 Szjv0U0amJbnufG2kIsb3aiy/TPEUqmqUZITO0Un7LX15P+uFho6ksKzIzZEoSmkAxG5
 Mysfws99U38gGy7CEsZxcJRwCzUhY5MlUWpoAHb9bw+0aV6x9cyu/2OibI8jbWQrX/XW
 APhA==
X-Received: by 10.180.37.69 with SMTP id w5mr6880865wij.53.1387356095211;
 Wed, 18 Dec 2013 00:41:35 -0800 (PST)
Received: from [192.168.73.37] (5357DA75.cm-6-8d.dynamic.ziggo.nl.
 [83.87.218.117])
 by mx.google.com with ESMTPSA id w20sm2077150wia.5.2013.12.18.00.41.33
 for <multiple recipients>
 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
 Wed, 18 Dec 2013 00:41:34 -0800 (PST)
Message-ID: <52B15FD1.9020407@gmail.com>
Date: Wed, 18 Dec 2013 09:41:53 +0100
From: Yeb Havinga <yebhavinga@gmail.com>
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:17.0) Gecko/17.0 Thunderbird/17.0
MIME-Version: 1.0
To: Craig Ringer <craig@2ndquadrant.com>
CC: PostgreSQL-development <pgsql-hackers@postgresql.org>
Subject: Re: [v9.4] row level security
References: 
 <CADyhKSWkHrPqbRsFK0LjPMOOTsbKGWOuN75GqYJrxCDO3CKWtA@mail.gmail.com>
 <WM!fb94ecb91cd381e69d8e4773d3810f48e4e0ef000525cc806c4ee509f215ce1a39c8c2a1c3ffde72ba2ddb1a07ebcdc9!@asav-2.01.com>
 <5220D832.7090104@agliodbs.com> <20130830192729.GO2706@tamriel.snowman.net>
 <16798.1377891794@sss.pgh.pa.us>
 <CA+TgmoZYv_me1iB6iDRA_oO-o9xkxXYqr-0UtwK5itpZbDsqYA@mail.gmail.com>
 <1398.1378305956@sss.pgh.pa.us>
 <CA+TgmoYTf+4RUOW8stVz1RE+3TD+QR5TNKzYuFDCehSkieL5OQ@mail.gmail.com>
 <1543.1378306249@sss.pgh.pa.us> <2620.1378308159@sss.pgh.pa.us>
 <52775604.9090306@2ndquadrant.com> <11101.1383575839@sss.pgh.pa.us>
 <CA+TgmoZS46fGTHCMo1FpNiBYDU7Wrx7R8PL+48Xc7UcVCsuaUA@mail.gmail.com>
 <52784DF9.9040205@2ndquadrant.com>
 <CA+TgmobvM9t8y6+BoG0DXMVA5jcNc9V6fzNt2tNSaVqsRmGpHA@mail.gmail.com>
 <5279E3CA.7050400@2ndquadrant.com>
 <CAM-w4HOJaWt2naKakW67KRZE9mBcEF-BQ3UA=7SHKcFv3=FmVQ@mail.gmail.com>
 <527C478D.4070901@2ndquadrant.com> <52ABCF6C.4010409@gmail.com>
 <52ABE150.6050201@2ndquadrant.com>
In-Reply-To: <52ABE150.6050201@2ndquadrant.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Pg-Spam-Score: -2.0 (--)
List-Archive: <http://archives.postgresql.org/pgsql-hackers>
List-Help: <mailto:majordomo@postgresql.org?body=help>
List-ID: <pgsql-hackers.postgresql.org>
List-Owner: <mailto:pgsql-hackers-owner@postgresql.org>
List-Post: <mailto:pgsql-hackers@postgresql.org>
List-Subscribe: <mailto:majordomo@postgresql.org?body=sub%20pgsql-hackers>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>
X-Mailing-List: pgsql-hackers
Precedence: bulk
Sender: pgsql-hackers-owner@postgresql.org

On 2013-12-14 05:40, Craig Ringer wrote:
> I find the heirachical and non-heirachical label security model used in
> Teradata to be extremely interesting and worthy of study.
>
> The concept is that there are heirachical label policies (think
> "classified", "unclassified", etc) or non-heirachical (mutually
> exclusive labels). A user can see a row if they have all the policies
> used in a table, and each of the user's policy values is sufficient to
> see the row. For non-heiracical policies that means the user and row
> must have at least one label in common; for heiracical policies it means
> the user label must be greater than or equal to the row label.
>
> That model lets you quite flexibly and easily build complex security
> models. It'd work well with PostgreSQL, too: We could implement
> something like non-heirachical policies using a system varbit column
> that's added whenever a non-heirachical policy gets added to a table,
> and simply AND it with the varbit on the user's policy to see if they
> can access the row. Or use a compact fixed-width bitfield. Heirachical
> policies would use a 1 or 2 byte int system column to store the label.

Is is necessary to fix the attribute type of the security label? The 
label model described above seems to restrictive to support e.g. the 
labels described on p18 of the 'healthcare classification system' (HCS) 
(http://www.hl7.org/documentcenter/public/wg/secure/3.%20HCS%20Guide%20Final%202013%200322%20JMD.pdf). 
The HCS security label is based on the NIST's FIPS188 standard / 
http://www.itl.nist.gov/fipspubs/fip188.htm

regards,
Yeb Havinga



-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers