5 ms·
> It's amazing how much effort we put into restricting access on the server, but ignore user roles on the data layer. That's one of the reasons PostgREST seems
by natmaka 8y ago
> It's amazing how much effort we put into restricting access on the server, but ignore user roles on the data layer.
That's one of the reasons PostgREST seems promising to me.
http://postgrest.org http://postgrest.org
- everdev 8y agoI've looked into it as well and it looks really interesting. The biggest downside for me was that at some point I still needed a backend server to hold secrets or run business logic. At that point, Postgresql was just another server / dependency that I couldn't justify as all of the nifty RLS was done inside Postgres. It definitely introduced me to RLS though.
- BerislavLopac 8y agoI've also been a happy user of Sandman: https://github.com/jeffknupp/sandman2 https://github.com/jeffknupp/sandman2
- natmaka 8y agoThere is a list at https://github.com/dbohdan/automatic-api/ https://github.com/dbohdan/automatic-api/
- paulddraper 8y agoCheck out https://www.graphile.org/postgraphile/ https://www.graphile.org/postgraphile/