Struct RlsConfig 

pub struct RlsConfig {
    pub tenant_column: String,
    pub session_variable: String,
    pub application_role: Option<String>,
    pub tables: HashSet<String>,
    pub excluded_tables: HashSet<String>,
    pub allow_bypass: bool,
    pub policy_prefix: String,
}

Configuration for PostgreSQL RLS.

Fields

tenant_column: String

The tenant ID column name.

session_variable: String

PostgreSQL setting name for current tenant (e.g., “app.current_tenant”).

application_role: Option<String>

Role to apply policies to.

tables: HashSet<String>

Tables to enable RLS on.

excluded_tables: HashSet<String>

Tables excluded from RLS (e.g., shared lookup tables).

allow_bypass: bool

Whether to use BYPASSRLS for admin operations.

policy_prefix: String

Policy name prefix.

Implementations

impl RlsConfig

pub fn new(tenant_column: impl Into<String>) -> Self

Create a new RLS config with the given tenant column.

pub fn with_session_variable(self, var: impl Into<String>) -> Self

Set the session variable name.

pub fn with_role(self, role: impl Into<String>) -> Self

Set the application role.

pub fn add_table(self, table: impl Into<String>) -> Self

Add a table for RLS.

pub fn add_tables<I, S>(self, tables: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Add multiple tables for RLS.

pub fn exclude_table(self, table: impl Into<String>) -> Self

Exclude a table from RLS.

pub fn without_bypass(self) -> Self

Disable bypass for admin.

pub fn with_policy_prefix(self, prefix: impl Into<String>) -> Self

Set the policy prefix.

Trait Implementations

impl Clone for RlsConfig

fn clone(&self) -> RlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RlsConfig

fn default() -> Self

Returns the “default value” for a type.