On Wed, 2024-11-13 at 17:33 -0800, Mark Phillips wrote: > Given a database table with one policy statement FOR SELECT applied, it is > necessary > to apply additional policy statements for insert, update, and delete > operations? > > My testing indicates that this is case but I haven’t found an explanation of > this > requirement in the documentation.
https://www.postgresql.org/docs/current/ddl-rowsecurity.html says: When row security is enabled on a table (with ALTER TABLE ... ENABLE ROW LEVEL SECURITY), all normal access to the table for selecting rows or modifying rows must be allowed by a row security policy. So if you only have a policy for SELECT, that's all you are allowed to do. Yours, Laurenz Albe
