Read policy
The read policy defines the starting assumption for visibility.
It answers:
Should rows be visible or hidden by default?
Optimistic policy (default)
Rows are visible unless denied.
| Allow | Deny | Result |
|---|---|---|
| 0 | 0 | Visible |
| 1 | 0 | Visible |
| 0 | 1 | Hidden |
| 1 | 1 | Hidden |
Used when most data should be accessible.
Pessimistic policy
Rows are hidden unless explicitly allowed.
| Allow | Deny | Result |
|---|---|---|
| 0 | 0 | Hidden |
| 1 | 0 | Visible |
| 0 | 1 | Hidden |
| 1 | 1 | Hidden |
Used in stricter or regulated environments.
Conflict resolution
If multiple rules apply:
- Deny always wins
This applies regardless of policy and guarantees predictable behavior.
Related resources
Understand the concept