diff options
Diffstat (limited to 'doc/src')
| -rw-r--r-- | doc/src/sgml/sepgsql.sgml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/doc/src/sgml/sepgsql.sgml b/doc/src/sgml/sepgsql.sgml index ff083a06596..522aa8b9903 100644 --- a/doc/src/sgml/sepgsql.sgml +++ b/doc/src/sgml/sepgsql.sgml @@ -450,6 +450,12 @@ UPDATE t1 SET x = 2, y = md5sum(y) WHERE z = 100; </para> <para> + When objects that are subsidiary of other objects (such as a table's indexes + or triggers) are created or dropped, <literal>setattr</> permission will be + checked on the main object, instead of the subsidiary object itself. + </para> + + <para> When <xref linkend="sql-security-label"> is executed, <literal>setattr</> and <literal>relabelfrom</> will be checked on the object being relabeled with its old security label, then <literal>relabelto</> with the supplied |