Re: [GENERAL] RLS policy issue

2015-05-21 Thread Stephen Frost
Ted, * Ted Toth (txt...@gmail.com) wrote: > I'd also expect that the "rewrite" would have added the POLICY SELECT > USING clause to the query but I don't see any indication of that in > the details that follow: Just running 'explain' should show the policy. Are you running this as the owner of t

[GENERAL] RLS policy issue

2015-05-21 Thread Ted Toth
I'm work on understanding and implementing RLS. Since I work on systems using SELinux (MLS policy) I'm using the sepgsql module that I've modified slightly i.e. I've added a function named sepgsql_check_row_perm that I'm using in the policy for example I have a 'reports' table that looks like: