39 questions
44
votes
3
answers
15k
views
Why isn't row level security enabled for Postgres views?
I need strict control of the reading and writing of my Postgres data. Updatable views have always provided very good, strict, control of the reading of my data and allows me to add valuable computed ...
- 2,929
16
votes
2
answers
12k
views
how to implement row level security in spring data jpa using hibernate filter or other ways?
One of the very important problems in information softwares is the existence of users with different roles with different duties and access levels. For instance, think of an organization with the ...
- 2,308
11
votes
4
answers
9k
views
Row Level Security with Entity Framework
I've been trying to consider how Row Level Security could be implemented with the Entity Framework. The idea is to have a database agnostic means that would offer methods to restrict the rows coming ...
- 732
9
votes
3
answers
6k
views
How to implement row-level security in Java?
I am currently evaluating authentication / authorization frameworks.
Apache Shiro seems to be very nice but I am missing row-level security features.
E.g. there might be special rows in a database ...
- 16.1k
3
votes
1
answer
1k
views
Unable to update row of table with Row Level Security
I'm trying to update a row in a table with row level security policies, but keep getting the error new row violates row-level security policy for table "my_table".
Here's how I set up RLS ...
- 3,555
0
votes
1
answer
808
views
Force row level security in postgres
I want to enforce Row-Level Security (RLS) for PostgreSQL with Row Security Policies for ALL users including admins and table owners:
ALTER ROLE postgres WITH NOBYPASSRLS; -- enforce for the superuser
...
- 4,147
0
votes
1
answer
980
views
MYSQL Access Control
I want to implement column level and row level access control on data stored in my MySQL database. I am using NodeJS on my server, what's the way to go for this ?
I see SAP Hana allows that but want ...
- 385
7
votes
2
answers
1k
views
Row level security for groups or Making rows accebile to groups
I want the rows in a table accessible to only members of groups. I create users and add them to group by following method,
CREATE USER abc LOGIN PASSWORD 'securedpassword1';
CREATE USER xyz LOGIN ...
- 472
6
votes
1
answer
3k
views
Why is the policy's "using"-clause used for the new row while a "with check"-clause is provided for an update statement?
From the Postgres CREATE POLICY documentation:
UPDATE policies accept both a USING expression and a WITH CHECK expression. The USING expression determines which records the UPDATE command will see to ...
- 11.2k
4
votes
2
answers
3k
views
Row level security using prisma and postgres
I am using prisma and yoga graphql servers with a postgres DB.
I want to implement authorization for my graphql queries. I saw solutions like graphql-shield that solve column level security nicely - ...
- 2,692
2
votes
3
answers
756
views
Achieve Row Level Security(RLS) on Snowflake by assigning Secure views to roles and provide filter on multiple conditions
Let's say we have a table Fruits details,
Country
Fruit
USA
Apple
India
Mango
Italy
Kiwi
Australia
Guava
We have 3 Roles i.e.
region1_role,
region2_role and
global_role.
I want region1_role to have ...
- 106
2
votes
1
answer
1k
views
How to reference query values in Postgres res policy
I am trying to build a system with Postgres in which users can connect with each other by sending requests. I am handling the security logic with RLS. However, I am having some trouble with the ...
- 957
2
votes
2
answers
2k
views
SQL Server row level security - many to many
We are using SQL Server 2008 and have our permissions setup in Active Directory (AD). Each row in a core table needs to be only viewable by those that have permission to view each row. I can setup ...
- 397
1
vote
3
answers
2k
views
Embedded Power BI: Add Multiple Users in Row Level Security and assign different roles
I have downloaded App Owns Data from github - https://github.com/Microsoft/PowerBI-Developer-Samples. I have added Row Level Security by adding the following line:
generateTokenRequestParameters = ...
- 23
1
vote
1
answer
115
views
In Azure Data Explorer how do I parametrize metadata to be used in Row Level Security function in a query optimized way
My timeseries table T has the columns: location, sensor_id, timestamp and value. The table has thousands of sensor_id, billions of values per year and about 100 locations. The 100 locations are in 6 ...
- 27
1
vote
0
answers
813
views
Postgresql Multi-tenant Mode not using Index
create table sample_schema.sample_table1
(ID numeric(38) PRIMARY KEY NOT NULL,
tenant_id VARCHAR(255) NOT NULL,
Description VARCHAR(255)
);
create table sample_schema.sample_table2
...
0
votes
1
answer
185
views
Delete row despite missing select right on a column
In this example, the second column should not be visible for a member (role) of the group 'user_group', because this column is only required internally to regulate the row level security. however, ...
- 156
0
votes
4
answers
2k
views
Postgres Row Level Security doesn't allow update on restrictive select policy
Background
I'm working these days on organizing the Postgres database of a project in my work.
EDIT:
This database is connected to a NodeJS server that runs Postgraphile on it, in order to expose the ...
- 181
0
votes
1
answer
194
views
Is possible to create row level security policy for a postgresql view?
We need to implement row-level security policy for a PostgreSQL View. Is there any option to do this?
Thank You
0
votes
2
answers
868
views
How can I achieve row level security in SQL Server 2014
Is there any way to get row-level security in SQL Server 2014?
My problem is:
I have a table with data for multiple regions
I created a view for each region
Specific user will have access to specific ...
- 1,496