cockroachdb / cockroachdb/cockroach
sql: Additional audit logging for queries when RLS is enabled
Open
A-sql-privileges
C-enhancement
T-sql-foundations
- Dominant language
- Go
- Stars
- 32.5k
- Forks
- 4.1k
- PR merge metrics
- PR metrics pending
Description
When queries are executed on tables with row-level security (RLS) enabled, additional details may need to be captured in the SQL audit logs. This issue serves as a placeholder to gather and clarify the requirements.
Considerations include:
- what log channel
- how should the logging be defined?
At a minimum, we want to verify that the filters added by RLS are included in the log. If those are present, this might be sufficient to resolve the issue.
Jira issue: CRDB-46474
Epic CRDB-52152
Contributor guide
Assessment
This issue has not been assessed yet.