ban-create-policy

problem

CREATE POLICY can change access for existing clients when row level security is enabled. This rule is opt-in.

CREATE POLICY p ON accounts TO app_user USING (owner_id = current_user_id());

solution

Review the policy command, roles, and conditions before applying it.

Enable this rule with --include ban-create-policy.