Updated on 2026-05-29 GMT+08:00

ALTER ROW LEVEL SECURITY POLICY

Function

ALTER ROW LEVEL SECURITY POLICY modifies an existing row-level access control policy, including the policy name and the users and expressions affected by the policy.

Precautions

Only the table owner or administrators can perform this operation.

Syntax

     ALTER [ ROW LEVEL SECURITY ] POLICY [ IF EXISTS ] policy_name ON table_name RENAME TO new_policy_name

ALTER [ ROW LEVEL SECURITY ] POLICY policy_name ON table_name
    [ TO { role_name | PUBLIC } [, ...] ]
    [ USING ( using_expression ) ]

Parameter Description

**Table 1** ALTER ROW LEVEL SECURITY POLICY parameters
Parameter	Description	Value Range
policy_name	Specifies the name of a row-level access control policy to be modified.	A string compliant with the identifier naming rules.
table_name	Specifies the name of a table to which a row-level access control policy is applied.	Name of an existing table.
new_policy_name	Specifies the new name of a row-level access control policy.	-
role_name	Specifies names of users affected by a row-level access control policy will be applied. PUBLIC indicates that the row-level access control policy will affect all users.	Name of an existing role.
using_expression	Specifies an expression defined for a row-level access control policy. The return value is of the boolean type.	-

Examples

Enable row-level access control.

     ALTER TABLE all_data ENABLE ROW LEVEL SECURITY;

Change the name of the all_data_rls policy.

     ALTER ROW LEVEL SECURITY POLICY all_data_rls ON all_data RENAME TO all_data_new_rls;

Change the users affected by the row-level access control policy.

     ALTER ROW LEVEL SECURITY POLICY all_data_new_rls ON all_data TO alice, bob;

Modify the expression defined for the access control policy.

     ALTER ROW LEVEL SECURITY POLICY all_data_new_rls ON all_data USING (id > 100 AND role = current_user);

Helpful Links

CREATE ROW LEVEL SECURITY POLICY and DROP ROW LEVEL SECURITY POLICY

Parent Topic: Data Masking and Security