diff options
| author | Noah Misch | 2015-09-21 00:47:17 +0000 |
|---|---|---|
| committer | Noah Misch | 2015-09-21 00:47:17 +0000 |
| commit | 7f11724bd61b420acb2839908d51674e86e52034 (patch) | |
| tree | 56a0ce91220551a005955e849bddaa335be3c38f /src/include/miscadmin.h | |
| parent | 537bd178c73b1d25938347b17e9e3e62898fc231 (diff) | |
Remove the SECURITY_ROW_LEVEL_DISABLED security context bit.
This commit's parent made superfluous the bit's sole usage. Referential
integrity checks have long run as the subject table's owner, and that
now implies RLS bypass. Safe use of the bit was tricky, requiring
strict control over the SQL expressions evaluating therein. Back-patch
to 9.5, where the bit was introduced.
Based on a patch by Stephen Frost.
Diffstat (limited to 'src/include/miscadmin.h')
| -rw-r--r-- | src/include/miscadmin.h | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/src/include/miscadmin.h b/src/include/miscadmin.h index e0cc69f27ef..80ac7329dce 100644 --- a/src/include/miscadmin.h +++ b/src/include/miscadmin.h @@ -286,7 +286,6 @@ extern int trace_recovery(int trace_level); /* flags to be OR'd to form sec_context */ #define SECURITY_LOCAL_USERID_CHANGE 0x0001 #define SECURITY_RESTRICTED_OPERATION 0x0002 -#define SECURITY_ROW_LEVEL_DISABLED 0x0004 extern char *DatabasePath; @@ -305,7 +304,6 @@ extern void GetUserIdAndSecContext(Oid *userid, int *sec_context); extern void SetUserIdAndSecContext(Oid userid, int sec_context); extern bool InLocalUserIdChange(void); extern bool InSecurityRestrictedOperation(void); -extern bool InRowLevelSecurityDisabled(void); extern void GetUserIdAndContext(Oid *userid, bool *sec_def_context); extern void SetUserIdAndContext(Oid userid, bool sec_def_context); extern void InitializeSessionUserId(const char *rolename, Oid useroid); |