Is this user's read of the entity row-filtered? True when every read the user holds on the entity comes through a permission
row that carries a ReadRLSFilterID: there is a row-level security filter between them and the rows, so a record's key, its
existence and when it changed are not theirs to learn unless the row passes the filter — which a subscription filter cannot
evaluate per event. False when any of their read rows is unfiltered (they could read the row anyway), and false when they hold
no read at all (the entity-level filter has already withheld the event).
The same in-memory match GetUserPermisions does, with no I/O, so it can run per subscriber per event.
Is this user's read of the entity row-filtered? True when every read the user holds on the entity comes through a permission row that carries a
ReadRLSFilterID: there is a row-level security filter between them and the rows, so a record's key, its existence and when it changed are not theirs to learn unless the row passes the filter — which a subscription filter cannot evaluate per event. False when any of their read rows is unfiltered (they could read the row anyway), and false when they hold no read at all (the entity-level filter has already withheld the event).The same in-memory match
GetUserPermisionsdoes, with no I/O, so it can run per subscriber per event.