Doc: you must own the target object to use SECURITY LABEL.

For some reason this wasn't mentioned before.

Author: Patrick Stählin 
Reviewed-by: Tom Lane 
Discussion: https://postgr.es/m/931e012a-57ba-41ba-9b88-24323a46dec5@packi.ch
Backpatch-through: 13

diff --git a/doc/src/sgml/ref/security_label.sgml b/doc/src/sgml/ref/security_label.sgml
index e5e5fb483e94e3ee30cd6e8cc26d582cc01d2808..aa45c0af2487b03b23f4e6e835cde1470875306a 100644 (file)
--- a/doc/src/sgml/ref/security_label.sgml
+++ b/doc/src/sgml/ref/security_label.sgml
@@ -84,6 +84,10 @@ SECURITY LABEL [ FOR provider ] ON
    based on object labels, rather than traditional discretionary access control
    (DAC) concepts such as users and groups.
   
+
+  
+   You must own the database object to use SECURITY LABEL.
+