diff options
| author | Noah Misch | 2015-09-21 00:47:17 +0000 |
|---|---|---|
| committer | Pavan Deolasee | 2016-10-26 07:55:36 +0000 |
| commit | 46a5cfb74e863b26a131c58d3b389dd5f2bfb707 (patch) | |
| tree | cc34d210200e1a71ddfd83333bc00eb01872b664 /src/include | |
| parent | 10b83c1210e66eca38cc726443a93f40acdbcbd6 (diff) | |
Remove the SECURITY_ROW_LEVEL_DISABLED security context bit.
This commit's parent made superfluous the bit's sole usage. Referential
integrity checks have long run as the subject table's owner, and that
now implies RLS bypass. Safe use of the bit was tricky, requiring
strict control over the SQL expressions evaluating therein. Back-patch
to 9.5, where the bit was introduced.
Based on a patch by Stephen Frost.
Diffstat (limited to 'src/include')
| -rw-r--r-- | src/include/miscadmin.h | 1 | ||||
| -rw-r--r-- | src/include/utils/plancache.h | 5 |
2 files changed, 2 insertions, 4 deletions
diff --git a/src/include/miscadmin.h b/src/include/miscadmin.h index b6ea2ae742..be1cb664df 100644 --- a/src/include/miscadmin.h +++ b/src/include/miscadmin.h @@ -291,7 +291,6 @@ extern int trace_recovery(int trace_level); /* flags to be OR'd to form sec_context */ #define SECURITY_LOCAL_USERID_CHANGE 0x0001 #define SECURITY_RESTRICTED_OPERATION 0x0002 -#define SECURITY_ROW_LEVEL_DISABLED 0x0004 extern char *DatabasePath; diff --git a/src/include/utils/plancache.h b/src/include/utils/plancache.h index 19654fb48c..af73478c40 100644 --- a/src/include/utils/plancache.h +++ b/src/include/utils/plancache.h @@ -113,9 +113,8 @@ typedef struct CachedPlanSource #ifdef PGXC char *stmt_name; /* If set, this is a copy of prepared stmt name */ #endif - bool hasRowSecurity; /* planned with row security? */ - int row_security_env; /* row security setting when planned */ - bool rowSecurityDisabled; /* is row security disabled? */ + bool hasRowSecurity; /* planned with row security? */ + bool row_security_env; /* row security setting when planned */ } CachedPlanSource; /* |