pg_policy
The catalog pg_policy
stores row level
security policies for tables. A policy includes the kind of
command that it applies to (possibly all commands), the roles that it
applies to, the expression to be added as a security-barrier
qualification to queries that include the table, and the expression
to be added as a WITH CHECK
option for queries that attempt to
add new records to the table.
Table 52.38. pg_policy
Columns
Name | Type | References | Description |
---|---|---|---|
polname | name | The name of the policy | |
polrelid | oid |
| The table to which the policy applies |
polcmd | char | The command type to which the policy is applied:
r for SELECT ,
a for INSERT ,
w for UPDATE ,
d for DELETE ,
or * for all | |
polpermissive | boolean | Is the policy permissive or restrictive? | |
polroles | oid[] |
| The roles to which the policy is applied |
polqual | pg_node_tree | The expression tree to be added to the security barrier qualifications for queries that use the table | |
polwithcheck | pg_node_tree | The expression tree to be added to the WITH CHECK qualifications for queries that attempt to add rows to the table |
Policies stored in pg_policy
are applied only when
pg_class
.relrowsecurity
is set for
their table.