row-level-security

PostgreSQL data leakage during query planning is prevented by using security-barrier views and leakproof functions, which stop the planner from reordering untrusted qualifications and exposing protected rows. This skill audits those configurations to ensure sensitive data remains secure.

PostgreSQL RLS policies often do not fire for table owners due to default role hierarchy configurations, requiring specific policy debugging and permission audits to ensure correct application across complex user roles. This skill troubleshoots these exact permission and policy conflicts.

PERMISSIVE and RESTRICTIVE rules in PostgreSQL Row-Level Security manage policy application by combining multiple permissive rules with restrictive filters, ensuring users only access authorized data. This skill provides authoritative guidance on creating and auditing these nuanced policy combinations.

To verify a custom function is safe to mark as LEAKPROOF, you must validate its attributes against untrusted qualifications to ensure it cannot leak data during query planning. This skill performs the necessary leakproof function validation for security-sensitive environments.

Auditing PostgreSQL security-barrier view configurations involves analyzing rewriter logic extensions and view settings to prevent the planner from pushing untrusted qualifications past security barriers. This skill manages the configuration and debugging of these barrier views.