summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTom Lane <tgl@sss.pgh.pa.us>2025-06-05 11:29:24 -0400
committerTom Lane <tgl@sss.pgh.pa.us>2025-06-05 11:29:45 -0400
commit74637fb797778e7ee1111c6f0c40f95680d21768 (patch)
tree2d46aec1d2644b1338e5f9d94c78ab08b08c67dc
parentefb3f16e0d348cb7c6e8a0507a280a6537f580b7 (diff)
Doc: you must own the target object to use SECURITY LABEL.
For some reason this wasn't mentioned before. Author: Patrick Stählin <me@packi.ch> Reviewed-by: Tom Lane <tgl@sss.pgh.pa.us> Discussion: https://postgr.es/m/931e012a-57ba-41ba-9b88-24323a46dec5@packi.ch Backpatch-through: 13
-rw-r--r--doc/src/sgml/ref/security_label.sgml4
1 files changed, 4 insertions, 0 deletions
diff --git a/doc/src/sgml/ref/security_label.sgml b/doc/src/sgml/ref/security_label.sgml
index e5e5fb483e9..aa45c0af248 100644
--- a/doc/src/sgml/ref/security_label.sgml
+++ b/doc/src/sgml/ref/security_label.sgml
@@ -84,6 +84,10 @@ SECURITY LABEL [ FOR <replaceable class="parameter">provider</replaceable> ] ON
based on object labels, rather than traditional discretionary access control
(DAC) concepts such as users and groups.
</para>
+
+ <para>
+ You must own the database object to use <command>SECURITY LABEL</command>.
+ </para>
</refsect1>
<refsect1>