Row-level security, and why it belongs in the database
What row-level security is, the three places teams put record-level rules, why the ones written in application code eventually leak, and the checks that tell you whether yours actually holds.
- Two questions that get confused for one
- The three places the rule ends up
- The rule is a path through your data
- Multi-tenancy is this problem wearing a suit
- How to tell whether yours actually holds
- How this works on our platform