10 Commits (f0e44751d7175fa3394da2c8f85e3ceb3cdbfe63)

Author	SHA1	Message	Date
Stephen Frost	dcbf5948e1	Improve qual pushdown for RLS and SB views ... The original security barrier view implementation, on which RLS is built, prevented all non-leakproof functions from being pushed down to below the view, even when the function was not receiving any data from the view. This optimization improves on that situation by, instead of checking strictly for non-leakproof functions, it checks for Vars being passed to non-leakproof functions and allows functions which do not accept arguments or whose arguments are not from the current query level (eg: constants can be particularly useful) to be pushed down. As discussed, this does mean that a function which is pushed down might gain some idea that there are rows meeting a certain criteria based on the number of times the function is called, but this isn't a particularly new issue and the documentation in rules.sgml already addressed similar covert-channel risks. That documentation is updated to reflect that non-leakproof functions may be pushed down now, if they meet the above-described criteria. Author: Dean Rasheed, with a bit of rework to make things clearer, along with comment and documentation updates from me.	11 years ago
Peter Eisentraut	001e114b8d	Fix whitespace issues found by git diff --check, add gitattributes ... Set per file type attributes in .gitattributes to fine-tune whitespace checks. With the associated cleanups, the tree is now clean for git	12 years ago
Robert Haas	cd30728fb2	Allow LEAKPROOF functions for better performance of security views. ... We don't normally allow quals to be pushed down into a view created with the security_barrier option, but functions without side effects are an exception: they're OK. This allows much better performance in common cases, such as when using an equality operator (that might even be indexable). There is an outstanding issue here with the CREATE FUNCTION / ALTER FUNCTION syntax: there's no way to use ALTER FUNCTION to unset the leakproof flag. But I'm committing this as-is so that it doesn't have to be rebased again; we can fix up the grammar in a future commit. KaiGai Kohei, with some wordsmithing by me.	14 years ago
Robert Haas	49562f5eb6	Adjustments to regression tests for security_barrier views. ... Drop the role we create, so regression tests pass even when run more than once against the same cluster, a problem noted by Tom Lane and Jeff Janes. Also, rename the temporary role so that it starts with "regress_", to make it unlikely that we'll collide with an existing role name while running "make installcheck", per further gripe from Tom Lane.	14 years ago
Robert Haas	504f0c5d5d	Regression tests for security_barrier views. ... KaiGai Kohei	14 years ago
Peter Eisentraut	3f11971916	Remove extra newlines at end and beginning of files, add missing newlines ... at end of files.	16 years ago
Thomas G. Lockhart	d1e6368816	Clean up header for uniform appearance throughout tests.	26 years ago
Vadim B. Mikheev	11303a941f	Second query in select_views.sql is replaced.	28 years ago
Thomas G. Lockhart	1d7b6f14e2	Adjust tests to reflect removal of time travel. ... Add tests for strings and varchar.	28 years ago
Marc G. Fournier	832c0a4ff1	split out a bunch more tests from misc.source so that the tester knows ... what's being tested :)	29 years ago