Received: from malur.postgresql.org ([217.196.149.56])
 by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from
 <pgsql-hackers-owner+M242266=pgsql-hackers-arkari@postgresql.org>)
 id 1W4F5F-0003Es-NE
 for pgsql-hackers@arkaria.postgresql.org; Fri, 17 Jan 2014 19:28:01 +0000
Received: from localhost ([127.0.0.1] helo=postgresql.org)
 by malur.postgresql.org with smtp (Exim 4.80) (envelope-from
 <pgsql-hackers-owner+M242266=pgsql-hackers-arkari@postgresql.org>)
 id 1W4F5E-0000hl-UO
 for pgsql-hackers@arkaria.postgresql.org; Fri, 17 Jan 2014 19:28:00 +0000
Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29])
 by malur.postgresql.org with esmtp (Exim 4.80)
 (envelope-from <gregsmithpgsql@gmail.com>) id 1W4F5A-0000bt-O9
 for pgsql-hackers@postgresql.org; Fri, 17 Jan 2014 19:27:56 +0000
Received: from mail-qa0-x232.google.com ([2607:f8b0:400d:c00::232])
 by magus.postgresql.org with esmtp (Exim 4.80)
 (envelope-from <gregsmithpgsql@gmail.com>) id 1W4F57-000401-DE
 for pgsql-hackers@postgresql.org; Fri, 17 Jan 2014 19:27:56 +0000
Received: by mail-qa0-f50.google.com with SMTP id cm18so3627027qab.37
 for <pgsql-hackers@postgresql.org>; Fri, 17 Jan 2014 11:27:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=message-id:date:from:user-agent:mime-version:to:cc:subject
 :references:in-reply-to:content-type:content-transfer-encoding;
 bh=Eafpl379b5K0s2gTvcceXrn7eKZUnW+iLmmtofjLYYA=;
 b=G5Sad8B0dAgO0pe0BzjkbzeJOGsBwn1b+Drdb5tQfHIMARhASEaEP63yFJB+PtZ6Zo
 Zp0t7cr6j0/F7ENuQ3Zeq7OBY+y7w3txGTDLe+I356O03eQWu8AQTS+7T/qLNCbmdjQ4
 gANb4nFt/VpqHI2BHXkodbcWtxU43v28pJpLn3JHNKCWNIfKuk75Q8nWPJIlupg4nU9I
 GgxwxkEdG4VpcItcW6jh5SmF5551AGdsxJVsQ49gcP5fqAri04NiMEYOERcFaxYxahf1
 cnXyUGJEiIIosfADVzNmFMfAa7D+joK/wraxk8za0SuTom5hSDU98st/wfpAnalvFT7a
 kSxA==
X-Received: by 10.224.2.194 with SMTP id 2mr6426673qak.44.1389986872332;
 Fri, 17 Jan 2014 11:27:52 -0800 (PST)
Received: from [192.168.1.30] (mail.highperformancepostgresql.com.
 [71.179.240.8])
 by mx.google.com with ESMTPSA id m9sm15296184qaz.8.2014.01.17.11.27.50
 for <multiple recipients>
 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
 Fri, 17 Jan 2014 11:27:51 -0800 (PST)
Message-ID: <52D98436.2030508@gmail.com>
Date: Fri, 17 Jan 2014 14:27:50 -0500
From: Gregory Smith <gregsmithpgsql@gmail.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8;
 rv:24.0) Gecko/20100101 Thunderbird/24.2.0
MIME-Version: 1.0
To: Craig Ringer <craig@2ndquadrant.com>, Greg Stark <stark@mit.edu>
CC: Robert Haas <robertmhaas@gmail.com>, Tom Lane <tgl@sss.pgh.pa.us>,
 Stephen Frost <sfrost@snowman.net>,
 Josh Berkus <josh@agliodbs.com>, Kohei KaiGai <kaigai@kaigai.gr.jp>,
 "ktm@rice.edu" <ktm@rice.edu>, Alexander Korotkov <aekorotkov@gmail.com>,
 PostgreSQL-development <pgsql-hackers@postgresql.org>,
 jeff.mccormick@crunchydatasolutions.com
Subject: Re: [v9.4] row level security
References: 
 <CADyhKSWkHrPqbRsFK0LjPMOOTsbKGWOuN75GqYJrxCDO3CKWtA@mail.gmail.com>
 <WM!fb94ecb91cd381e69d8e4773d3810f48e4e0ef000525cc806c4ee509f215ce1a39c8c2a1c3ffde72ba2ddb1a07ebcdc9!@asav-2.01.com>
 <5220D832.7090104@agliodbs.com> <20130830192729.GO2706@tamriel.snowman.net>
 <16798.1377891794@sss.pgh.pa.us>
 <CA+TgmoZYv_me1iB6iDRA_oO-o9xkxXYqr-0UtwK5itpZbDsqYA@mail.gmail.com>
 <1398.1378305956@sss.pgh.pa.us>
 <CA+TgmoYTf+4RUOW8stVz1RE+3TD+QR5TNKzYuFDCehSkieL5OQ@mail.gmail.com>
 <1543.1378306249@sss.pgh.pa.us> <2620.1378308159@sss.pgh.pa.us>
 <52775604.9090306@2ndquadrant.com> <11101.1383575839@sss.pgh.pa.us>
 <CA+TgmoZS46fGTHCMo1FpNiBYDU7Wrx7R8PL+48Xc7UcVCsuaUA@mail.gmail.com>
 <52784DF9.9040205@2ndquadrant.com>
 <CA+TgmobvM9t8y6+BoG0DXMVA5jcNc9V6fzNt2tNSaVqsRmGpHA@mail.gmail.com>
 <5279E3CA.7050400@2ndquadrant.com>
 <CAM-w4HOJaWt2naKakW67KRZE9mBcEF-BQ3UA=7SHKcFv3=FmVQ@mail.gmail.com>
 <527C478D.4070901@2ndquadrant.com> <52ABCF6C.4010409@gmail.com>
 <52ABE150.6050201@2ndquadrant.com>
In-Reply-To: <52ABE150.6050201@2ndquadrant.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Pg-Spam-Score: -2.0 (--)
List-Archive: <http://archives.postgresql.org/pgsql-hackers>
List-Help: <mailto:majordomo@postgresql.org?body=help>
List-ID: <pgsql-hackers.postgresql.org>
List-Owner: <mailto:pgsql-hackers-owner@postgresql.org>
List-Post: <mailto:pgsql-hackers@postgresql.org>
List-Subscribe: <mailto:majordomo@postgresql.org?body=sub%20pgsql-hackers>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>
X-Mailing-List: pgsql-hackers
Precedence: bulk
Sender: pgsql-hackers-owner@postgresql.org

On 12/13/13 11:40 PM, Craig Ringer wrote:
> You may want to check out the updated writable security-barrier views patch.
>
> http://www.postgresql.org/message-id/52AB112B.6020403@2ndquadrant.com
>
> It may offer a path forward for the CF submission for RLS, letting us
> get rid of the var/attr fiddling that many here objected to.

With my advocacy hat on, I'd like to revisit this idea now that there's 
a viable updatable security barrier view submission.  I thought the most 
serious showstopper feedback from the last CF's RLS submission was that 
this needed to be sorted out first.  Reworking KaiGai's submission to 
merge against Dean's new one makes it viable again in my mind, and I'd 
like to continue toward re-reviewing it as part of this CF in that 
light.  Admittedly it's not ideal to try and do that at the same time 
the barrier view patch is being modified, but I see that as a normal CF 
merge of things based on other people's submissions.

I mentioned advocacy because the budding new PostgreSQL test instances 
I'm seeing now will lose a lot of momentum if we end up with no user 
visible RLS features in 9.4.  The pieces we have now can assemble into 
something that's useful, and I don't think that goal is unreasonably far 
away.

-- 
Greg Smith greg.smith@crunchydatasolutions.com
Chief PostgreSQL Evangelist - http://crunchydatasolutions.com/


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers