Struct RlsPolicy 

pub struct RlsPolicy {
    pub name: String,
    pub table: String,
    pub target: PolicyTarget,
    pub permissiveness: PolicyPermissiveness,
    pub using: Option<Expr>,
    pub with_check: Option<Expr>,
    pub role: Option<String>,
}

AST-native RLS policy definition.

All expressions use typed Expr nodes — no raw SQL strings. The transpiler converts these to CREATE POLICY ... USING (...) WITH CHECK (...).

Fields

name: String

Policy name (e.g., “orders_operator_isolation”)

table: String

Table this policy applies to

target: PolicyTarget

Target command(s): ALL, SELECT, INSERT, UPDATE, DELETE

permissiveness: PolicyPermissiveness

Permissive (default) or Restrictive

using: Option<Expr>

USING expression — controls which existing rows are visible. Applied to SELECT, UPDATE (read), DELETE.

with_check: Option<Expr>

WITH CHECK expression — controls which new rows can be written. Applied to INSERT, UPDATE (write).

role: Option<String>

Role this policy applies to (default: PUBLIC)

Implementations

impl RlsPolicy

pub fn create(name: impl Into<String>, table: impl Into<String>) -> Self

Create a new policy builder.

use qail_core::migrate::policy::RlsPolicy;
let policy = RlsPolicy::create("tenant_isolation", "orders");

pub fn for_all(self) -> Self

Set policy target to ALL (SELECT + INSERT + UPDATE + DELETE).

pub fn for_select(self) -> Self

Set policy target to SELECT only.

pub fn for_insert(self) -> Self

Set policy target to INSERT only.

pub fn for_update(self) -> Self

Set policy target to UPDATE only.

pub fn for_delete(self) -> Self

Set policy target to DELETE only.

pub fn restrictive(self) -> Self

Make this policy restrictive (AND with other policies).

pub fn using(self, expr: Expr) -> Self

Set the USING expression (visibility filter for existing rows). This is an AST expression, not a raw SQL string.

pub fn with_check(self, expr: Expr) -> Self

Set the WITH CHECK expression (write filter for new rows). This is an AST expression, not a raw SQL string.

pub fn to_role(self, role: impl Into<String>) -> Self

Restrict policy to a specific role.

Trait Implementations

impl Clone for RlsPolicy

fn clone(&self) -> RlsPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RlsPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RlsPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for RlsPolicy

fn eq(&self, other: &RlsPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for RlsPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RlsPolicy