thing-permission-policy-rls.sql

create role application_user;
grant all on all table in schema public to application_user;

create policy thing_owner
on things
as permissive
for all
to application_user
using (
  exists(
    select thing_id
    from permissions
    where (
      permissions.user_id = current_setting('user_id')::uuid
      and permissions.item_id = items.id
    )
  )
)
with check (
  exists(
    select item_id
    from permissions
    where (
      permissions.user_id = current_setting('user_id')::uuid
      and permissions.item_id = items.id
    )
  )
);

create policy new_thing
on things
as permissive
for insert
to application_user
with check (true);

alter table things enable row level security;