drizzle-team / drizzle-team/drizzle-orm

[FEATURE]: Disable Row Level Security (RLS) management by config

Open
#4,763 2 comments 0 reactions 0 assignees View on GitHub
db/postgres drizzle/kit enhancement
Dominant language
TypeScript
Stars
35.8k
Forks
1.6k
Avg merge
2d 7h
Merged PRs (30d)
4

Description

### Feature hasn't been suggested before.

- [x] I have verified this feature I'm about to request hasn't been suggested before.

### Describe the enhancement you want to request

Since Drizzle is definitively not ready for production to manage RLS (open bugs, no support for functions, partial support for roles, no official wrapper), and this is a security related issue, I suggest to add a configuration switch to be able to disable any changes related to RLS.

At the moment, if I don't tell it about RLS, Drizzle will happily delete all RLS policies and disable RLS on my tables without warning, if I do, drizzle-kit push creates empty policies, locking up the system. (I'm on Postgres 17 with the pg driver)

Making changes to RLS has severe consequences, there should be a way to disable this behaviour until it's really ready and tested to be used.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.