vignesh/bottleneckcrm
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

perf(rls): wrap current_setting() in org-isolation policies so it evaluates once per statement (InitPlan)

Browse source
This commit is contained in:
Dmitry Maranik 2026-07-14 23:35:51 -07:00
parent 938a7da095
commit 5eff502fa1
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
RLS_SETUP.md
View file

@ -229,14 +229,14 @@ Each table has two policies:
```sql
CREATE POLICY org_isolation ON "lead"
FOR ALL
USING (org_id::text = NULLIF(current_setting('app.current_org', true), ''));
USING (org_id::text = (select NULLIF(current_setting('app.current_org', true), '')));
```
2. **Insert Check Policy**:
```sql
CREATE POLICY org_insert_check ON "lead"
FOR INSERT
WITH CHECK (org_id::text = NULLIF(current_setting('app.current_org', true), ''));
WITH CHECK (org_id::text = (select NULLIF(current_setting('app.current_org', true), '')));
```
The `NULLIF(..., '')` ensures **no rows are returned** when context is not set (fail-safe).