Why isn't hasura.user run-time parameter set on queries? #10751
Unanswered
jonathancgt
asked this question in
Question
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
I know that Hasura is a little opinionated with regard to row-level security, and where it should take place, app level vs db level, but I'm feeling a bit hamstrung at the moment, because I have my own opinions, and would like to enable RLS for select statements on the tables backing my Hasura deployment, but I don't have anything to work with, since the
hasura.user
run-time parameter is only being set for mutations. Other API solutions like PostgREST set run-time parameters for everything, so I'd like it if Hasura would at least make transactional queries w/ session data run-time parameter included a configurable option, perhaps in the SelectPermission definition.Beta Was this translation helpful? Give feedback.
All reactions