postgres/row-level-security
Checks that every table in a client schema turns on row level security.
Part of the postgres configuration, at the recommended level. It runs at the commit stage, once per scope. gspot runs this check itself.
In an exposed schema, every client with the public key can read and write a table that has no row security.
What to do
Section titled “What to do”Enable row level security on the table.
Example
Section titled “Example”A new table without row-level security reports a finding. Add ALTER TABLE ... ENABLE ROW LEVEL SECURITY for it.
Turn it off
Section titled “Turn it off”Turn it off for some files, with a reason:
gspot ignore postgres/row-level-security --paths "<glob>" --reason "<why>"