Le 25.02.2025 10:34, Andres Freund a écrit :
Hi,
On February 25, 2025 10:08:44 AM GMT+01:00, Damien Clochard
<dam...@dalibo.info> wrote:
So my first question is : Do you think it would be helpful to update
the SECURITY LABEL command documentation to clarify that security
labels are not concerned by object inheritance ?
Couldn't hurt.
Please find attached a small change to documentation explaining that
security labels are not inherited.
Regards,
--
Damien Clochard
From b088c59030d139604bcf1125815818d1bc99726a Mon Sep 17 00:00:00 2001
From: damien clochard <dam...@dalibo.com>
Date: Mon, 23 Jun 2025 15:04:02 +0200
Subject: [PATCH] doc: security labels are not inherited
---
doc/src/sgml/ref/security_label.sgml | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/doc/src/sgml/ref/security_label.sgml b/doc/src/sgml/ref/security_label.sgml
index aa45c0af248..8562745648d 100644
--- a/doc/src/sgml/ref/security_label.sgml
+++ b/doc/src/sgml/ref/security_label.sgml
@@ -88,6 +88,14 @@ SECURITY LABEL [ FOR <replaceable class="parameter">provider</replaceable> ] ON
<para>
You must own the database object to use <command>SECURITY LABEL</command>.
</para>
+
+ <para>
+ Security labels are not inherited through object inheritance, meaning labels
+ applied to a parent object, like a table or a role, are not automatically passed
+ down to its child objects. Each database object has its own independent set of
+ security labels, requiring administrators to explicitly declare labels to each
+ individual object rather than relying on automatic inheritance.
+ </para>
</refsect1>
<refsect1>
--
2.34.1
