RLS Policy Coverage Report

Generated: 2026-01-11
Total Tables: 433
Overall Coverage: 94.2%

​

Executive Summary

​

Coverage by Module

​

Policy Type Coverage

​

UPDATE Policies WITH CHECK Clause

​

Recursion-Safe Policies

​

Detailed Coverage Tables

​

Platform Foundation (PF)

​

Human Resources (HR)

​

Finance & Accounting (FA)

​

Forms & Workflow (FW)

​

Tables with Special Access Patterns

​

Audit/Version Tables (Intentional Partial Coverage)

​

Audit Tables

• pf_audit_logs
• pf_index_cleanup_audit
• hr_document_access_logs
• hr_payroll_audit_log
• hr_ssn_access_log
• fw_approval_history
• fw_domain_events
• fw_signature_audit_log
• fw_automation_logs
• fm_asset_maintenance_history
• fm_work_order_history
• fm_inventory_transactions

​

Version Tables (Immutable)

• pf_document_versions
• fw_form_versions
• fw_workflow_versions
• gr_policy_versions
• lo_knowledge_article_versions
• it_kb_article_versions

​

Validation Queries

​

Check Tables Without RLS

SELECT tablename
FROM pg_tables
WHERE schemaname = 'public'
  AND tablename NOT LIKE 'pg_%'
  AND tablename NOT IN (
    SELECT tablename FROM pg_policies WHERE schemaname = 'public'
  );

​

Check UPDATE Policies Without WITH CHECK

SELECT tablename, policyname
FROM pg_policies
WHERE schemaname = 'public'
  AND cmd = 'UPDATE'
  AND with_check IS NULL;

​

Check Policy Coverage Count

SELECT tablename, COUNT(*) as policy_count
FROM pg_policies 
WHERE schemaname = 'public'
GROUP BY tablename
ORDER BY policy_count, tablename;

​

Related Documentation

• ERD Diagrams
• RLS Patterns Reference
• RLS Policy Audit
• CI/CD RLS Validation Guide