acl

pig build pkg pg_acl         # 构建 RPM / DEB 包

pig repo add pgsql -u          # 添加仓库并更新缓存

CREATE EXTENSION acl;

CREATE EXTENSION acl;

-- 检查当前用户的访问权限
SELECT acl_check_access(acl_column, 'rw', false) FROM my_table;

-- 检查指定角色
SELECT acl_check_access(acl_column, 'r', 'username'::name, false);

-- 检查自定义 int4 角色
SELECT acl_check_access(acl_column, 'rw', ARRAY[1001, 1002]::int4[], false);

-- 从父级计算子级 ACL
SELECT acl_merge(parent_acl, child_acl, true, true);

CREATE TABLE file_system (
    id   int PRIMARY KEY,
    name text,
    acl  ace[]
);

ALTER TABLE file_system ENABLE ROW LEVEL SECURITY;

CREATE POLICY read_policy ON file_system FOR SELECT TO PUBLIC
    USING (acl_check_access(acl, 'r', false) = 'r');

CREATE POLICY write_policy ON file_system FOR UPDATE TO PUBLIC
    USING (acl_check_access(acl, 'w', false) = 'w');