Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tk5Xm-00HRpi-Uq for pgsql-hackers@arkaria.postgresql.org; Mon, 17 Feb 2025 18:08:34 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1tk5Xl-0016sM-CB for pgsql-hackers@arkaria.postgresql.org; Mon, 17 Feb 2025 18:08:33 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tk5Xl-0016s7-1y for pgsql-hackers@lists.postgresql.org; Mon, 17 Feb 2025 18:08:33 +0000 Received: from sss.pgh.pa.us ([68.162.161.243]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1tk5Xi-001MdO-1L for pgsql-hackers@postgresql.org; Mon, 17 Feb 2025 18:08:31 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.15.2/8.15.2) with ESMTP id 51HI8TEa853594; Mon, 17 Feb 2025 13:08:29 -0500 From: Tom Lane To: Nathan Bossart cc: Dean Rasheed , pgsql-hackers@postgresql.org Subject: Re: revamp row-security tracking In-reply-to: References: Comments: In-reply-to Nathan Bossart message dated "Mon, 17 Feb 2025 11:53:00 -0600" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <853592.1739815709.1@sss.pgh.pa.us> Date: Mon, 17 Feb 2025 13:08:29 -0500 Message-ID: <853593.1739815709@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Nathan Bossart writes: > Given there doesn't seem to be a huge amount of interest in this, I plan to > mark it as Withdrawn soon. I think you're being too impatient. It's still an interesting topic, it just needs more thought to get to something committable. I find this has-row-security marking problem to be comparable to the has-sublinks marking problem. We've had tons of bugs-of-omission with that too, and the present code feels ugly and not any less prone to omissions than it ever was. I wonder whether considering both problems together would yield any insights, following Polya's dictum that "the more general problem may be easier to solve". One straightforward idea is to just not do the marking at all, but rather require places that want to know these properties to do a fresh search of the query tree when they want to know it. That obviously has performance questions to answer, but it's easier to give answers to performance questions than "is this correct" questions. regards, tom lane