Simon, * Simon Charette (charett...@gmail.com) wrote: > Ahh makes sense, thanks for the explanation! > > I was assuming USING() clauses were executed in the context of the > owner of the policy, by passing RLS.
No, as with views, a USING() clause is executed as the caller not the owner of the relation. Security Definer functions can be used to execute actions in the policy as another user. Note that RLS won't be applied for the table owner either (unless the relation has 'FORCE RLS' enabled for it), so you don't have to have functions which are run as superuser to use the approach Joe recommended. Thanks! Stephen
signature.asc
Description: Digital signature
