jimmy/postgrest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix the 'Roles for Each Web User' example (#313)

Browse Source 
Add missing `ALTER TABLE ... ENABLE ROW LEVEL SECURITY;`
This commit is contained in:
Duncan Ogilvie
2020-03-23 11:48:09 -05:00
committed by GitHub
parent 334dda611c
commit e23b7afa3c
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
auth.rst
+2
View File
@@ -61,6 +61,8 @@ You can use row-level security to flexibly restrict visibility and access for th
message_body TEXT message_body TEXT
); );
ALTER TABLE chat ENABLE ROW LEVEL SECURITY;
We want to enforce a policy that ensures a user can see only those messages sent by him or intended for him. Also we want to prevent a user from forging the message_from column with another person's name. We want to enforce a policy that ensures a user can see only those messages sent by him or intended for him. Also we want to prevent a user from forging the message_from column with another person's name.
PostgreSQL (9.5 and later) allows us to set this policy with row-level security: PostgreSQL (9.5 and later) allows us to set this policy with row-level security: