Row Level Security Explained
summary
Explains how PostgreSQL implements Row-Level Security: policies become WHERE filters during the query rewrite phase, using separate using and with check expressions, and default to deny when enabled. Covers performance traps—non leakproof functions block index pushdown (casts commonly hurt), functions run with the querier unless marked security definer, and tools like PG Audit and row_security GUC for dumps are discussed. Includes a concrete passwd-file example and actionable policy syntax.
AI-written summary · about
chapters (7)
- 0:00Start
- 6:38Policies and permissions
- 8:35Leakproof functions
- 14:05Enabling Row Level Security
- 22:02CREATE POLICY FOR SELECT
- 29:41POLICY vs. GRANT
- 40:26Unix Password File
related talks
53mRow Level Security
18mEverything you need to know about Postgres Row Level Security
43mThe Role of Row Level Security in High-Load Projects
28mHitchhiker's Guide to Row-Level Security in Citus
27mFor Your Eyes Only: Roles, Privileges, and Security in PostgreSQL
07mAll about Postgres security
40mPostgreSQL Security for Application Developers
32mEnhancing Security in PostgreSQL