Automate creation, auditing, and enforcement of PostgreSQL row-level security policies.
npx skills add https://github.com/Valynt/ValueOS --skill rls-policy-valynt
Please help me install this Agent Skill. Skill: rls-policy Source: https://github.com/Valynt/ValueOS/tree/main/.windsurf/skills/rls-policy Command: npx skills add https://github.com/Valynt/ValueOS --skill rls-policy-valynt
All tenant-scoped tables must have RLS enabled and four policies covering SELECT, INSERT, UPDATE, and DELETE. The canonical authorization function is security.user_has_tenant_access(organization_id::text) and enables tenant-aware access checks across the schema.
Enable RLS on a target table, add the four standard policies using the organization_id column, and verify with pnpm run test:rls.
High-intent search queries and answers about installing and using this skill.
Row-level security for tenant isolation is enforced by enabling RLS on tables and applying four standard policies for SELECT, INSERT, UPDATE, and DELETE using the organization_id column for access checks.
Before applying row-level security policies, your database requires the security.user_has_tenant_access(organization_id::text) function, an organization_id column on target tables, and accompanying references templates and migrations.
Validate row-level security policies by running the test:rls command and executing audit queries to verify the security schema and ensure tenant-aware access checks are properly applied across your tables.
Yes, row-level security policies can be applied across existing schemas. The process guides developers through enabling RLS, adding the four standard tenant policies, and validating them with test:rls.
Automate tenant isolation policy creation by using deterministic policy templates to add the four standard policies for SELECT, INSERT, UPDATE, and DELETE on all tenant-scoped tables.
Row-level security requires an organization_id column because it serves as the tenant identifier that the security.user_has_tenant_access function checks to determine access permissions for each row.
AHMADJAN-NewEnforce organization and school data isolation with Row Level Security policies.
jtucker9Audit Row Level Security policies across PostgreSQL and Supabase schemas.
whawkinsivDesign secure multi-tenant SaaS database schemas with Supabase and PostgreSQL.
Spectaculous-CodeAudit Supabase RLS policies and GRANT statements for security gaps.
