Subasese realtime-RLS仅允许在url/xyz与DB列中的xyz匹配时删除

您可以使用 custom setting 要保持当前链接,请从RLS中引用它: demo

create policy only_xyz on boards 
using      (edit_link = current_setting('public.pass_the_current_link_here',true)) 
with check (edit_link = current_setting('public.pass_the_current_link_here',true));

只要该设置始终设置为当前访问的页面,它将只允许对属于它的行进行操作:

set foo.pass_the_current_link_here='example.com/mypage';

insert into boards (edit_link) values ('example.com/mypage') returning *;

设置不匹配将在上引发错误 insert :

insert into boards (edit_link) values ('example.com/another_page') returning *;

ERROR:  new row violates row-level security policy for table "boards"

全部的 select , update , merge 和 delete 语句将一无所获,除非设置匹配。如果 使现代化 和 合并 新值和旧值都需要匹配(策略中的规则 using 部分强制新的匹配, with check 保护旧的):

delete from boards where edit_link='example.com/another_page' returning *;

DELETE 0

update boards set edit_link='example.com/mypage' 
  where edit_link='example.com/another_page' 
  returning *;

UPDATE 0