Postgres Row-Level Security
Discussions center on using PostgreSQL's row-level security (RLS) and RBAC for fine-grained database access control, including comparisons with API-level auth and tools like Supabase, PostgREST, and Hasura.
Activity Over Time
Top Contributors
Keywords
Sample Comments
Would something like Postgres RLS be enough?
I wonder if Postgres RBAC row based access control is another solution to this.
I think it's more about access control. They don't do any access control at the db level afaik.
How hard is it to have an API with reasonable RBAC? Why does it NEED database access?
What permissions logic is not easily expressed in your database?
Seems like a good usecase for row-level permissions
I'm excited for row level security, it's going to make auth so much easier to work with when using Postgrest
Absolutely fine grain access control is a must have
As I wrote on the original thread, we recommend using the RDBMS row-level security features.This blog discusses how to do that on Postgreshttps://www.2ndquadrant.com/en/blog/application-users-vs-row...
You can use row-level security, or specify RBAC with pretty much any SQL query.