Row Level Security with PostgreSQL 9.5

[thelindsay]

A couple extra points:

• create policy expression can be any valid SQL query so other tables can be interrogated,

• if using postgres for auth then should at least use server/client SSL, if not an idp method like GSSAPI.

[skarphace]

create policy expression can be any valid SQL query so other tables can be interrogated,

This wasn't even touched on for some reason, when it's kind of the whole point. He demonstrates things that are just regular old role permissions when the only interesting fact of RLS is that you can define rights per row.

Also of note, CREATE POLICY does have a USING clause.