On 20 August 2016 at 03:15, Andrea Adami <fol@fulcro.net> wrote:
> when i run the query: "select * from public.policy_view"
> the ouput is the same (all rows) for all users
> i'm doing some mistakes or this is a bug ?
>
No, it looks correct to me. When going through a view, the policies
and permission checks that apply are those that would apply to the
view's owner, which in this case is postgres, so no policies are
applied.
Or, quoting from the notes in the CREATE POLICY documentation:
As with normal queries and views, permission checks and policies for the tables which are referenced by a view
willuse the view owner's rights and any policies which apply to the view owner.
Regards,
Dean