diff options
| author | Joe Conway <mail@joeconway.com> | 2016-12-22 17:57:01 -0800 |
|---|---|---|
| committer | Joe Conway <mail@joeconway.com> | 2016-12-22 17:57:01 -0800 |
| commit | 51e9df7a1005fc7748c71cd359431f2a41ea678d (patch) | |
| tree | d8d2479c7899c7af94ad6e8ca7d128e45fbf6b4e | |
| parent | f0f2e56ac28c05f930ca76c432d61909c9a12cdb (diff) | |
| download | postgresql-51e9df7a1005fc7748c71cd359431f2a41ea678d.tar.gz postgresql-51e9df7a1005fc7748c71cd359431f2a41ea678d.zip | |
Improve RLS documentation with respect to COPY
Documentation for pg_restore said COPY TO does not support row security
when in fact it should say COPY FROM. Fix that.
While at it, make it clear that "COPY FROM" does not allow RLS to be
enabled and INSERT should be used instead. Also that SELECT policies
will apply to COPY TO statements.
Back-patch to 9.5 where RLS first appeared.
Author: Joe Conway
Reviewed-By: Dean Rasheed and Robert Haas
Discussion: https://postgr.es/m/5744FA24.3030008%40joeconway.com
| -rw-r--r-- | doc/src/sgml/ref/copy.sgml | 9 | ||||
| -rw-r--r-- | doc/src/sgml/ref/pg_dump.sgml | 5 | ||||
| -rw-r--r-- | doc/src/sgml/ref/pg_restore.sgml | 2 |
3 files changed, 15 insertions, 1 deletions
diff --git a/doc/src/sgml/ref/copy.sgml b/doc/src/sgml/ref/copy.sgml index 07e2f45196f..8ad547272fc 100644 --- a/doc/src/sgml/ref/copy.sgml +++ b/doc/src/sgml/ref/copy.sgml @@ -419,6 +419,15 @@ COPY <replaceable class="parameter">count</replaceable> </para> <para> + If row-level security is enabled for the table, the relevant + <command>SELECT</command> policies will apply to <literal>COPY + <replaceable class="parameter">table</> TO</literal> statements. + Currently, <command>COPY FROM</command> is not supported for tables + with row-level security. Use equivalent <command>INSERT</command> + statements instead. + </para> + + <para> Files named in a <command>COPY</command> command are read or written directly by the server, not by the client application. Therefore, they must reside on or be accessible to the database server machine, diff --git a/doc/src/sgml/ref/pg_dump.sgml b/doc/src/sgml/ref/pg_dump.sgml index f1e60bb51b1..038a376f4a7 100644 --- a/doc/src/sgml/ref/pg_dump.sgml +++ b/doc/src/sgml/ref/pg_dump.sgml @@ -702,6 +702,11 @@ PostgreSQL documentation to dump the parts of the contents of the table that they have access to. </para> + <para> + Note that if you use this option currently, you probably also want + the dump be in <command>INSERT</command> format, as the + <command>COPY FROM</command> during restore does not support row security. + </para> </listitem> </varlistentry> diff --git a/doc/src/sgml/ref/pg_restore.sgml b/doc/src/sgml/ref/pg_restore.sgml index c9069193afc..ef5bab40d1d 100644 --- a/doc/src/sgml/ref/pg_restore.sgml +++ b/doc/src/sgml/ref/pg_restore.sgml @@ -527,7 +527,7 @@ <para> Note that this option currently also requires the dump be in <command>INSERT</command> - format, as <command>COPY TO</command> does not support row security. + format, as <command>COPY FROM</command> does not support row security. </para> </listitem> </varlistentry> |