Реализация Row Level Security на MySQL

-- Триггер для docs
DROP PROCEDURE IF EXISTS docs_trg_proc$
CREATE PROCEDURE docs_trg_proc()
BEGIN
	/* версия 00002 */
	-- Проверки
	DECLARE msg TEXT;
	-- Документ закрыт. Изменения запрещены.
	SET msg := (SELECT raise_error('Документ закрыт. Изменения запрещены.')
	FROM docs_tmp_trg d
	WHERE COALESCE(d.new_closed, d.old_closed) = 1 AND d.time = 'B'
	AND (
		d.type IN ('I', 'D')
		OR (d.type = 'U'
			AND d.new_closed = 1
			AND d.old_closed = 1
			-- Если изменился только статус, то проверку не делаем
			AND only_col_changed(d.col_changed, 'status_id') IS NULL
		)
	)
	);
	-- ...
	-- ...
	-- ...
	-- Заполним Юрлицо из склада, если оно пустое
	UPDATE docs_tmp_trg
	INNER JOIN organizations ON docs_tmp_trg.new_org_id_addr = organizations.id
	SET docs_tmp_trg.new_org_id_ur = organizations.org_id_ur
	WHERE docs_tmp_trg.type IN ('I', 'U') AND docs_tmp_trg.time = 'B' AND docs_tmp_trg.new_org_id_ur IS NULL;
	-- И проверим что Юрлицо входит в ГО Юрлица
	SET msg := (SELECT raise_error('Юрлицо должно входить в ГО Юрлица')
	FROM docs_tmp_trg d
	WHERE d.time = 'B' AND d.type IN ('I', 'U')
	AND d.new_org_id_ur NOT IN (SELECT gr.org_id
	 FROM pos_org_gr gr
	 WHERE gr.gr_org_id = (SELECT value FROM sys_vars WHERE name = 'ГО_ЮРЛИЦА')
	));
	-- Заполним номер документа если он пустой
	UPDATE docs_tmp_trg SET new_num = get_auto_num()
	WHERE time = 'B' AND type IN ('I') AND new_num IS NULL;
	-- ...
	-- ...
	-- ...
	-- Закрытие документа
	SELECT close_doc(d.new_id, IF(d.new_closed = 1 AND d.old_closed IS NULL, 1, -1))
	INTO msg
	FROM docs_tmp_trg d
	WHERE d.time = 'A' AND d.type = 'U' AND (d.new_closed = 1 AND d.old_closed IS NULL OR d.new_closed IS NULL AND d.old_closed = 1)
	;
END$

DELIMITER $
CREATE PROCEDURE raise_error(msg TEXT)
BEGIN
  SET @raise_error_msg := IFNULL(msg, '');
  DROP TEMPORARY TABLE IF EXISTS mysql_error_generator;
  CREATE TEMPORARY TABLE mysql_error_generator(raise_error VARCHAR(255) unique) engine=MEMORY;
  INSERT INTO mysql_error_generator VALUES (IFNULL(msg, '')), (IFNULL(msg, ''));
END$

class ExPDOException extends PDOException {
	public function __construct(PDOException $e, PDO $connection) {
		parent::__construct($e->getMessage(), 0, $e->getPrevious());
		$this->code = $e->getCode();
		$this->errorInfo = $e->errorInfo;
		// Пользовательская ошибка
		if ($e->getCode() == 23000 && strstr($e->getMessage(), "for key 'raise_error'")) {
			$this->code = -20000;
			$this->errorInfo[0] = -20000;
			$this->errorInfo[1] = -20000;
			$sql = 'SELECT @raise_error_msg msg';
			$q = $connection->query($sql);
			$msg = $q->fetchColumn();
			$this->message = $msg;
			$this->errorInfo[2] = $msg;
		}
	}
}