build1 publisher
WITH CHECK (true) accepts the UPDATE that moves tenant 1's invoices into tenant 2's books
A fixture seed that fails under FORCE ROW LEVEL SECURITY has one tempting repair, and after it the write path is guarded only by the read policy, for exactly as long as the statement happens to read a column.
Publishers:dev.to
Reality
- Evidence74
- Adoption
- Insufficient
- Hype gap+6
- Incentives24
- Confidence66