Re: PostgreSQL

shammat@gmx.net

From: Thomas Kellerer <shammat@gmx.net>
To: pgsql-general@lists.postgresql.org
Date: 2023-02-07T11:10:07Z
Lists: pgsql-general
Joseph Kennedy schrieb am 07.02.2023 um 12:02:
> I would like restrict access to sensitive or restricted information
> for some users (eg. hide data of one or more clients for some
> database users).
>
> PostgreSQL allows to create security policy as Row-Level Security,
> policies based on the querying user.
>
>
> Are there any other alternatives to RLS, are there any better
> solutions??

You can create a view layer and only grant access to the data through views
(and obviously revoke access to the tables directly)

Or allow access only through (set returning) functions