Question is how do I insert data with relations similar to how you query tables with relations using Resource Embeddeding?
Like a nested JSON object inserted to the right tables based on foreign keys...
ךושיל Jeton Mustini (Gitter): If you're referring to a PostgREST/postgrest#818 then no. You can create a view which joins the tables together and then an instead of rule when updating.
Hi, I was wondering how Row Level Security is used in Postgrest to restrict user can only operate on its own row?
They way I can think of is to use RLS to grant a user to access only to his/her specific row is by adding a column called username
CREATE POLICY accounts_policy
ON public.accounts
USING (username = CURRENT_USER);In this way, current login user can operate on rows that have the same username as the current user.
I don't think thats feasible. Since
- It requires every table has a column called
usernamewhich will be used to match with current login user. - We need to create a user in PG for each client user. (What if there are 500k users for an app, are we going to create so many users? My approach is not automated which makes it even worse!)
My proposal is definitely not good. But I am wondering how RSL is used in Postgrest?
3 replies
Dear all, I am trying to achieve RLS using JWT with an email claim. I took the todos table from the tutorial and added a column email. I also created an auth schema with a user table. Each user has an email and a role (authenticator). BTW: there are only two relevant roles web_anon (for everything that is public) and authenticator for everything that needs authentication. With the right policy in place and a JWT with email claim I can make a GET request that returns only those rows that match the email.
Question: How do I POST - add a task to the todos table - and insert the email present in the JWT email claim? I could add the email to the data {"task": "hugo's task", "email": "hugo@gmail.com"}, but that does not seem right, because someone could take a valid JWT and insert tasks for someone else...
Hey everyone, I've been banging my head against the wall a little trying to serve images for an <img>. Following the how-to in the docs, I'm currently experiencing a different behaviour. Let's say we are making a request to /rpc/file?id=42. In my case, the body of the response is the literal string in bytea hex format. I think this may be related to the select:
select files.blob from files where files.id = file.id into blob;From my understanding, select files.blob will actually output the binary data into a binary string. Any help would be greatly appreciated!
21 replies
