Re: Row level security insert policy does not validate update new values/content?

update = delete + insert is not universally true.  Its main point is that due to MVCC when you update something the old tuple is deleted (but remains around waiting to be vacuumed) and a new tuple is created.  It is also an implementation detail - while the usage of INSERT/UPDATE/DELETE in CREATE POLICY are semantically significant and mean to convey the user writing out those specific commands (or subcommand in the case of the ON CONFLICT UPDATE subclause of INSERT).

In this case it gives the policy writer flexibility, at the cost of some duplication.  One useful thing to do is write a function that accepts either columns, or the table's data type, as an input argument and put the logic in there.  Then just call the function in the policy with check and/or using clauses.

David J.