Search Postgresql Archives

Re: RLS 9.5rc1 configuration changes?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Ted Toth <txtoth@xxxxxxxxx> writes:
> On Mon, Jan 4, 2016 at 4:54 PM, Tom Lane <tgl@xxxxxxxxxxxxx> wrote:
>> Are you perhaps testing this as a superuser?  Superusers bypass RLS
>> even with FORCE ROW LEVEL SECURITY.

> Yes I was a Superuser but without 'Bypass RLS'. So there's no way to
> enforce RLS for all users/roles?

There's no such thing as a "superuser without bypassrls", or a superuser
without any other privilege either.  That's the point of having superuser,
is that you can *always* defeat privilege restrictions if you have to.

I do not know if Crunchy's 9.4 mods broke that principle, but if so,
it was a bug IMO.

			regards, tom lane


-- 
Sent via pgsql-general mailing list (pgsql-general@xxxxxxxxxxxxxx)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general



[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Postgresql Jobs]     [Postgresql Admin]     [Postgresql Performance]     [Linux Clusters]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Books]     [PHP Databases]     [Postgresql & PHP]     [Yosemite]
  Powered by Linux