Re: [HACKERS] RLS bug in expanding security quals

2015-10-09 Thread Stephen Frost
* Haribabu Kommi (kommi.harib...@gmail.com) wrote: > On Fri, Oct 9, 2015 at 3:50 AM, Dean Rasheed wrote: > > On 8 October 2015 at 15:05, Dean Rasheed wrote: > >> Attached is a simple patch that appears to work, but it needs more > >> testing

Re: [HACKERS] RLS bug in expanding security quals

2015-10-08 Thread Dean Rasheed
On 8 October 2015 at 05:45, Haribabu Kommi wrote: > On Thu, Oct 8, 2015 at 2:54 PM, Stephen Frost wrote: >> It's quite late here, but I'll take a look at this in more depth >> tomorrow. >> >> Based on what the Assert's testing, I took an educated

Re: [HACKERS] RLS bug in expanding security quals

2015-10-08 Thread Dean Rasheed
On 8 October 2015 at 15:05, Dean Rasheed wrote: > Attached is a simple patch that appears to work, but it needs more > testing (and some regression tests). > Here's an updated patch with an extra regression test case that triggers the issue. I've also updated the

Re: [HACKERS] RLS bug in expanding security quals

2015-10-08 Thread Stephen Frost
Dean, * Dean Rasheed (dean.a.rash...@gmail.com) wrote: > On 8 October 2015 at 15:05, Dean Rasheed wrote: > > Attached is a simple patch that appears to work, but it needs more > > testing (and some regression tests). > > Here's an updated patch with an extra regression

Re: [HACKERS] RLS bug in expanding security quals

2015-10-08 Thread Haribabu Kommi
On Fri, Oct 9, 2015 at 3:50 AM, Dean Rasheed wrote: > On 8 October 2015 at 15:05, Dean Rasheed wrote: >> Attached is a simple patch that appears to work, but it needs more >> testing (and some regression tests). >> > > Here's an updated patch

Re: [HACKERS] RLS bug in expanding security quals

2015-10-07 Thread Stephen Frost
Haribabu, * Haribabu Kommi (kommi.harib...@gmail.com) wrote: > During the testing of multi-tenancy feature from system catalog views, that > is described in [1], found a problem in executing "user_privileges" view > from information_schema. The following is the minimal test sql that > reproduces

[HACKERS] RLS bug in expanding security quals

2015-10-07 Thread Haribabu Kommi
During the testing of multi-tenancy feature from system catalog views, that is described in [1], found a problem in executing "user_privileges" view from information_schema. The following is the minimal test sql that reproduces the problem. SELECT (u_grantor.rolname) AS grantor,

Re: [HACKERS] RLS bug in expanding security quals

2015-10-07 Thread Haribabu Kommi
On Thu, Oct 8, 2015 at 2:54 PM, Stephen Frost wrote: > Haribabu, > > * Haribabu Kommi (kommi.harib...@gmail.com) wrote: >> During the testing of multi-tenancy feature from system catalog views, that >> is described in [1], found a problem in executing "user_privileges" view >>