begriffs open source - ai-pg/blob - full-docs/html/catalog-pg-policy.html

   1 <?xml version="1.0" encoding="UTF-8" standalone="no"?>
   2 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>52.38. pg_policy</title><link rel="stylesheet" type="text/css" href="stylesheet.css" /><link rev="made" href="pgsql-docs@lists.postgresql.org" /><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot" /><link rel="prev" href="catalog-pg-partitioned-table.html" title="52.37. pg_partitioned_table" /><link rel="next" href="catalog-pg-proc.html" title="52.39. pg_proc" /></head><body id="docContent" class="container-fluid col-10"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="5" align="center">52.38. <code class="structname">pg_policy</code></th></tr><tr><td width="10%" align="left"><a accesskey="p" href="catalog-pg-partitioned-table.html" title="52.37. pg_partitioned_table">Prev</a> </td><td width="10%" align="left"><a accesskey="u" href="catalogs.html" title="Chapter 52. System Catalogs">Up</a></td><th width="60%" align="center">Chapter 52. System Catalogs</th><td width="10%" align="right"><a accesskey="h" href="index.html" title="PostgreSQL 18.0 Documentation">Home</a></td><td width="10%" align="right"> <a accesskey="n" href="catalog-pg-proc.html" title="52.39. pg_proc">Next</a></td></tr></table><hr /></div><div class="sect1" id="CATALOG-PG-POLICY"><div class="titlepage"><div><div><h2 class="title" style="clear: both">52.38. <code class="structname">pg_policy</code> <a href="#CATALOG-PG-POLICY" class="id_link">#</a></h2></div></div></div><a id="id-1.10.4.40.2" class="indexterm"></a><p>
   3    The catalog <code class="structname">pg_policy</code> stores row-level
   4    security policies for tables.  A policy includes the kind of
   5    command that it applies to (possibly all commands), the roles that it
   6    applies to, the expression to be added as a security-barrier
   7    qualification to queries that include the table, and the expression
   8    to be added as a <code class="literal">WITH CHECK</code> option for queries that attempt to
   9    add new records to the table.
  10   </p><div class="table" id="id-1.10.4.40.4"><p class="title"><strong>Table 52.38. <code class="structname">pg_policy</code> Columns</strong></p><div class="table-contents"><table class="table" summary="pg_policy Columns" border="1"><colgroup><col /></colgroup><thead><tr><th class="catalog_table_entry"><p class="column_definition">
  11        Column Type
  12       </p>
  13       <p>
  14        Description
  15       </p></th></tr></thead><tbody><tr><td class="catalog_table_entry"><p class="column_definition">
  16        <code class="structfield">oid</code> <code class="type">oid</code>
  17       </p>
  18       <p>
  19        Row identifier
  20       </p></td></tr><tr><td class="catalog_table_entry"><p class="column_definition">
  21        <code class="structfield">polname</code> <code class="type">name</code>
  22       </p>
  23       <p>
  24        The name of the policy
  25       </p></td></tr><tr><td class="catalog_table_entry"><p class="column_definition">
  26        <code class="structfield">polrelid</code> <code class="type">oid</code>
  27        (references <a class="link" href="catalog-pg-class.html" title="52.11. pg_class"><code class="structname">pg_class</code></a>.<code class="structfield">oid</code>)
  28       </p>
  29       <p>
  30        The table to which the policy applies
  31       </p></td></tr><tr><td class="catalog_table_entry"><p class="column_definition">
  32        <code class="structfield">polcmd</code> <code class="type">char</code>
  33       </p>
  34       <p>
  35        The command type to which the policy is applied:
  36        <code class="literal">r</code> for <a class="xref" href="sql-select.html" title="SELECT"><span class="refentrytitle">SELECT</span></a>,
  37        <code class="literal">a</code> for <a class="xref" href="sql-insert.html" title="INSERT"><span class="refentrytitle">INSERT</span></a>,
  38        <code class="literal">w</code> for <a class="xref" href="sql-update.html" title="UPDATE"><span class="refentrytitle">UPDATE</span></a>,
  39        <code class="literal">d</code> for <a class="xref" href="sql-delete.html" title="DELETE"><span class="refentrytitle">DELETE</span></a>,
  40        or <code class="literal">*</code> for all
  41       </p></td></tr><tr><td class="catalog_table_entry"><p class="column_definition">
  42        <code class="structfield">polpermissive</code> <code class="type">bool</code>
  43       </p>
  44       <p>
  45        Is the policy permissive or restrictive?
  46       </p></td></tr><tr><td class="catalog_table_entry"><p class="column_definition">
  47        <code class="structfield">polroles</code> <code class="type">oid[]</code>
  48        (references <a class="link" href="catalog-pg-authid.html" title="52.8. pg_authid"><code class="structname">pg_authid</code></a>.<code class="structfield">oid</code>)
  49       </p>
  50       <p>
  51        The roles to which the policy is applied;
  52        zero means <code class="literal">PUBLIC</code>
  53        (and normally appears alone in the array)
  54       </p></td></tr><tr><td class="catalog_table_entry"><p class="column_definition">
  55        <code class="structfield">polqual</code> <code class="type">pg_node_tree</code>
  56       </p>
  57       <p>
  58        The expression tree to be added to the security barrier qualifications for queries that use the table
  59       </p></td></tr><tr><td class="catalog_table_entry"><p class="column_definition">
  60        <code class="structfield">polwithcheck</code> <code class="type">pg_node_tree</code>
  61       </p>
  62       <p>
  63        The expression tree to be added to the WITH CHECK qualifications for queries that attempt to add rows to the table
  64       </p></td></tr></tbody></table></div></div><br class="table-break" /><div class="note"><h3 class="title">Note</h3><p>
  65     Policies stored in <code class="structname">pg_policy</code> are applied only when
  66     <a class="link" href="catalog-pg-class.html" title="52.11. pg_class"><code class="structname">pg_class</code></a>.<code class="structfield">relrowsecurity</code> is set for
  67     their table.
  68    </p></div></div><div class="navfooter"><hr /><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="catalog-pg-partitioned-table.html" title="52.37. pg_partitioned_table">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="catalogs.html" title="Chapter 52. System Catalogs">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="catalog-pg-proc.html" title="52.39. pg_proc">Next</a></td></tr><tr><td width="40%" align="left" valign="top">52.37. <code class="structname">pg_partitioned_table</code> </td><td width="20%" align="center"><a accesskey="h" href="index.html" title="PostgreSQL 18.0 Documentation">Home</a></td><td width="40%" align="right" valign="top"> 52.39. <code class="structname">pg_proc</code></td></tr></table></div></body></html>