# postgres/row-level-security

> Checks that every table in a client schema turns on row level security.

Checks that every table in a client schema turns on row level security.

Part of the [`postgres`](/reference/configurations/postgres/) configuration, at the `recommended` [level](/start/concepts/#levels). It runs at the `commit` [stage](/start/concepts/#stage), once per scope. gspot runs this check itself.

## Why

In an exposed schema, every client with the public key can read and write a table that has no row security.

## What to do

Enable row level security on the table.

## Example

A new table without row-level security reports a finding. Add `ALTER TABLE ... ENABLE ROW LEVEL SECURITY` for it.

## Turn it off

Turn it off for some files, with a reason:

```shell
gspot ignore postgres/row-level-security --paths "<glob>" --reason "<why>"
```