Re: RLS without leakproof restrictions?

Поиск
Список
Период
Сортировка
От Tom Dunstan
Тема Re: RLS without leakproof restrictions?
Дата
Msg-id CAPPfruxgVOfb5FggGKYJB+dY0=pHuUOOjpR8MYR9zzbHj7uW7g@mail.gmail.com
обсуждение исходный текст
Ответ на Re: RLS without leakproof restrictions?  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-general
Hi Tom!

On Wed, 22 Feb 2023 at 14:16, Tom Lane <tgl@sss.pgh.pa.us> wrote:
If you're happy allowing the application to decide if the filters will
be enforced, maybe just create some views embodying those filters, and
query those views when you want restrictions?

Yeah, thanks very much for the suggestion. It's more maintenance than RLS policies as we'll need to update views as tables are modified, and we'll need to ensure that the app never selects from the underlying table, but it still beats needing to add filter clauses across the codebase.

Thanks

Tom

В списке pgsql-general по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: RLS without leakproof restrictions?
Следующее
От: Neethu P
Дата:
Сообщение: Event Triggers unable to capture the DDL script executed