Skip to content

View WITH ( security_invoker = TRUE ) is not detected #234

@mrjackdavis

Description

@mrjackdavis

Hey,

Firstly great project. I come here via https://github.com/bikeshedder/tusker to report this issue

I use RLS fairly heavily in my project and I've found security_invoker setting is not respected when diffing a view. This is exceptionally dangerous because by default it causes me to leak sensitive data.

Given:

CREATE OR REPLACE my_view WITH ( security_invoker = TRUE ) AS ... against an empty db

Expected:

CREATE OR REPLACE my_view WITH ( security_invoker = TRUE ) AS ...

Actual

CREATE OR REPLACE my_view AS ...


I expect this is related to #182

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions