Policies

Row-level security policies filter rows, and column-level security policies hide columns.

A policy decides what a user can see based on their session property values. Policy changes apply as soon as the request returns.

  • RLS: filters the rows of one or more models with a condition such as @region = 'EMEA'
  • CLS: hides columns from users whose session property value does not match