security label and indexes

Started by Ted Tothover 3 years ago2 messagesgeneral
Jump to latest
#1Ted Toth
txtoth@gmail.com

I noticed that the 'security label' sql command does not include indexes as
objects that can be labeled, why is that? What sepgsql security class are
indexes, db_table?

Ted

#2Tom Lane
tgl@sss.pgh.pa.us
In reply to: Ted Toth (#1)
Re: security label and indexes

Ted Toth <txtoth@gmail.com> writes:

I noticed that the 'security label' sql command does not include indexes as
objects that can be labeled, why is that? What sepgsql security class are
indexes, db_table?

Indexes don't have security labels, just as they don't have SQL
permissions. From a security standpoint, they're implementation
details of the table they belong to. Whatever usage restrictions
you want should be put on the table, instead.

regards, tom lane