Property based access policies

[hbriese]

Description

Allow specifying the properties on which an access policy applies.

This would be applicable to select, insert and update.

Example

type User {
  required property name -> str;
  multi link friends -> User;

  access policy friends_can_select_name
    allow select { name }
    using (global current_user_id in .friends.id);
}

[hbriese]

From a postgres implementation standpoint

select

Postgres GRANT is obvious candidate but would restrict any selects on the table, so likely would not be a good candidate.
Hopefully egdedb itself has a better mechanism

insert & update

Can be achieved using postgres WITH CHECK to ensure only the allowed fields are updated