PostgreSQL Row-Level Security(RLS) 与策略实践

--- title: PostgreSQL Row-Level Security(RLS) 与策略实践 keywords: RLS, ENABLE ROW LEVEL SECURITY, CREATE POLICY, USING, WITH CHECK description: 启用行级安全并为多租户数据创建策略，结合会话变量实现按租户隔离的读写控制。 tags: - CREATE POLICY - ENABLE ROW LEVEL SECURITY - PostgreSQL - RLS - USING - WITH CHECK - 安全 - 数据库 categories: - 应用软件 - 安全杀毒 --- 启用 RLS： ``` ALTER TABLE public.orders ENABLE ROW LEVEL SECURITY; ``` 创建策略（按会话变量 tenant_id 过滤）： ``` CREATE POLICY orders_rls ON public.orders USING (tenant_id = current_setting('app.tenant_id')::int) WITH CHECK (tenant_id = current_setting('app.tenant_id')::int); ``` 设置会话并验证： ``` SET app.tenant_id = '1'; SELECT * FROM public.orders; INSERT INTO public.orders(id, tenant_id, amount) VALUES (1001, 1, 9.99); ```