Re: [GENERAL] RLS on catalog tables would be helpful

2016-03-02 Thread Joe Conway
On 03/02/2016 12:14 PM, Julien Rouhaud wrote: > On 02/03/2016 20:56, Joe Conway wrote: >> I thought there was once a link somewhere on the mail archives to get a >> specific email resent, but for the life of me I cannot find it today :-/ >> > > It's only available in majordomo AFAIK. For instance

Re: [GENERAL] RLS on catalog tables would be helpful

2016-03-02 Thread Julien Rouhaud
On 02/03/2016 20:56, Joe Conway wrote: > On 03/02/2016 11:53 AM, Joshua D. Drake wrote: >> On 03/02/2016 11:37 AM, Joe Conway wrote: >> >>> http://www.postgresql.org/message-id/flat/CA+Tgmoa=4vti1hb1hta0+qbzlojkpjbd5dkvw3zmp-kdwje...@mail.gmail.com#CA+Tgmoa=4vti1hb1hta0+qbzlojkpjbd5dkvw3zmp-kdwje..

Re: [GENERAL] RLS on catalog tables would be helpful

2016-03-02 Thread Pavel Stehule
Hi 2016-03-02 20:56 GMT+01:00 Joe Conway : > On 03/02/2016 11:53 AM, Joshua D. Drake wrote: > > On 03/02/2016 11:37 AM, Joe Conway wrote: > > > >> > http://www.postgresql.org/message-id/flat/CA+Tgmoa=4vti1hb1hta0+qbzlojkpjbd5dkvw3zmp-kdwje...@mail.gmail.com#CA+Tgmoa=4vti1hb1hta0+qbzlojkpjbd5dkvw3

Re: [GENERAL] RLS on catalog tables would be helpful

2016-03-02 Thread Adrian Klaver
On 03/02/2016 11:56 AM, Joe Conway wrote: On 03/02/2016 11:53 AM, Joshua D. Drake wrote: On 03/02/2016 11:37 AM, Joe Conway wrote: http://www.postgresql.org/message-id/flat/CA+Tgmoa=4vti1hb1hta0+qbzlojkpjbd5dkvw3zmp-kdwje...@mail.gmail.com#CA+Tgmoa=4vti1hb1hta0+qbzlojkpjbd5dkvw3zmp-kdwje...@ma

Re: [GENERAL] RLS on catalog tables would be helpful

2016-03-02 Thread Joe Conway
On 03/02/2016 11:53 AM, Joshua D. Drake wrote: > On 03/02/2016 11:37 AM, Joe Conway wrote: > >> http://www.postgresql.org/message-id/flat/CA+Tgmoa=4vti1hb1hta0+qbzlojkpjbd5dkvw3zmp-kdwje...@mail.gmail.com#CA+Tgmoa=4vti1hb1hta0+qbzlojkpjbd5dkvw3zmp-kdwje...@mail.gmail.com >> >> It would be good for

Re: [GENERAL] RLS on catalog tables would be helpful

2016-03-02 Thread Joshua D. Drake
On 03/02/2016 11:37 AM, Joe Conway wrote: http://www.postgresql.org/message-id/flat/CA+Tgmoa=4vti1hb1hta0+qbzlojkpjbd5dkvw3zmp-kdwje...@mail.gmail.com#CA+Tgmoa=4vti1hb1hta0+qbzlojkpjbd5dkvw3zmp-kdwje...@mail.gmail.com It would be good for you to add your thoughts on your use case and specific f

Re: [GENERAL] RLS on catalog tables would be helpful

2016-03-02 Thread Joe Conway
On 03/02/2016 11:29 AM, Alan Droege wrote: > I have removed SELECT rights from the pg_proc.prosrc column so that > I can hide the source code of stored functions. This is working OK, > however I would really like to just hide certain functions via RLS. > I understand that great damage could be don

[GENERAL] RLS on catalog tables would be helpful

2016-03-02 Thread Alan Droege
I have removed SELECT rights from the pg_proc.prosrc column so that I can hide the source code of stored functions. This is working OK, however I would really like to just hide certain functions via RLS. I understand that great damage could be done to the system catalog by allowing users to