Postgresql 可以从父级继承的Postgres父子行级安全性?
看起来像这样的子表Postgresql 可以从父级继承的Postgres父子行级安全性?,postgresql,row-level-security,Postgresql,Row Level Security,看起来像这样的子表 CREATE TABLE folder_item ( id uuid PRIMARY KEY DEFAULT gen_random_uuid() ,parent_id uuid REFERENCES folder_item (id) ON DELETE CASCADE ,role text NOT NULL DEFAULT 'inherit' ); 使用权限模型 CREATE POLICY folder_item_rolecheck ON folde
CREATE TABLE folder_item (
id uuid PRIMARY KEY DEFAULT gen_random_uuid()
,parent_id uuid REFERENCES folder_item (id) ON DELETE CASCADE
,role text NOT NULL DEFAULT 'inherit'
);
使用权限模型
CREATE POLICY folder_item_rolecheck ON folder_item FOR SELECT USING ( role = assigned_role );
但是,如果它找到一个带有“inherit”的行,我希望它改为查看父角色(递归)
这可能吗?在“创建策略”中,什么是“分配的角色”只是用于用户角色检查的占位符
-- Set NO FORCE ROW LEVEL SECURITY on table "folder_item" to off RLS for OWNER
ALTER TABLE folder_item NO FORCE ROW LEVEL SECURITY
-- Create function with RECURSIVE qwery and SECURITY DEFINER with OWNER as for table "folder_item"
CREATE OR REPLACE FUNCTION folder_item_check_child(
in_parent_id uuid
, in_role text)
RETURNS boolean
LANGUAGE 'plpgsql'
COST 100
STABLE SECURITY DEFINER
AS $BODY$BEGIN
RETURN EXISTS(
WITH RECURSIVE
childs AS (
SELECT tt.id, tt.role FROM folder_item AS tt
WHERE tt.parent_id=in_parent_id
UNION
SELECT child.id, child.role
FROM childs AS parent
INNER JOIN folder_item AS child ON child.parent_id=parent.id
)
SELECT * FROM childs AS tt WHERE tt.role=in_role
);
END$BODY$;
-- CREATE POLICY
CREATE POLICY folder_item_rolecheck ON folder_item FOR SELECT USING ( role = assigned_role
OR folder_item_check_child(id, assigned_role)
);