PostgreSQL Row-Level Security(RLS) 与策略实践

启用 RLS：ALTER TABLE public.orders ENABLE ROW LEVEL SECURITY;

创建策略（按会话变量 tenant_id 过滤）：CREATE POLICY orders_rls ON public.orders

USING (tenant_id = current_setting('app.tenant_id')::int)

WITH CHECK (tenant_id = current_setting('app.tenant_id')::int);

设置会话并验证：SET app.tenant_id = '1';

SELECT * FROM public.orders;

INSERT INTO public.orders(id, tenant_id, amount) VALUES (1001, 1, 9.99);