PostgreSQL Row-Level Security(RLS) 与策略实践

启用 RLS：ALTER TABLE public.orders ENABLE ROW LEVEL SECURITY; 创建策略（按会话变量 tenant_id 过滤）：CREATE POLICY orders_rls ON public.orders USING (tenant_id = current_setting('app.tenant_id')::int) WITH CHECK (tenant_id = current_setting('app.tenant_id')::int); 设置会话并验证：SET app.tenant_id = '1'; SELECT * FROM public.orders; INSERT INTO public.orders(id, tenant_id, amount) VALUES (1001, 1, 9.99);