2 ms·
>> With Row level security, as good as it is, there is always a chance of leaking happening, due to bugs, user error or the like That’s not correct. It’s hard
by andrewstuart 1y ago
>> With Row level security, as good as it is, there is always a chance of leaking happening, due to bugs, user error or the like
That’s not correct. It’s hard isolation. In effect, RLS automatically applies a where clause preventing developers inadvertently accessing the wrong data.
If you don’t set the Postgres environment variable then no data is returned.
All the hard isolation without the schema sync pain.
- lgas 1y ago> In effect, RLS automatically applies a where clause preventing developers inadvertently accessing the wrong data. Right, but this assumes that you have a) remembered to enable RLS for every table where it matters and b) configured appropriate rules perfectly for every table. And there are tons of things you can mess up in the rules. With per-tenant instances none of those things can happen.
- andrewstuart 1y agoTrue it doesn’t work if you do it wrong.
- Mi3q24 1y ago[dead]