Re: Record Level Security by User ID?

On Wed, Aug 24, 2022 at 10:31 AM Rob Berendt <rob@xxxxxxxxx> wrote:

create permission Brad_created_only
on rob.brad
FOR ROWS WHERE CREATEDUSER = CURRENT USER
ENFORCED FOR ALL ACCESS
ENABLE;

Wait, that works? I didn't expect it to; given that the docs for CREATE
PERMISSION say
FOR ROWS WHEREIndicates that a row permission is created. A row permission
specifies a search condition under which rows of the table can be accessed.
search-conditionSpecifies a condition that can be true, false, or unknown
for a row of the table.The *search-condition* follows the same rules used
by the search condition in a WHERE clause. In addition, *it must not
reference* any of the following:

- *The table for which the row permission is being defined*


I took that to mean it couldn't refer (directly) to a column in the table
the permission was defined on.

Thanks for trying it out!

Charles