Multi tenant Postgres with row level security on every table, which works well for requests coming from a signed in user. The problem is the background work. A nightly aggregation, a webhook handler, and a job that…
One policy, the obvious one: There is a btree index on . Before enabling RLS the query planner used it and the endpoint was 40ms. After enabling, shows a sequential scan over all 2,146,880 rows and 6.2 seconds, with…
Postgres error 42501, message . Reads are perfect the user sees exactly their org's tasks. Inserts from a server action fail every time. The policy: I thought covered insert. What am I misreading?
Every policy currently does: That adds 6 9ms per query and a dashboard page runs 11 queries, so it is roughly 80ms of pure policy overhead on a page that should be 150ms. 200 organisations, average 8 members. The…
Writing this up because it was entirely preventable and I want to know how other people structure against it. One dashboard query was slow. Someone swapped the client in for one built with the service role key because…
Converting a single tenant app to multi tenant. 40 tables, 3 developers, a customer who wants it in Q3. Only our Node server talks to Postgres no browser client, no mobile app hitting the database directly. Given that,…
Two weeks into RLS. My current workflow for checking a policy is: one psql tab as the postgres role to alter the policy, one tab where I paste a JWT claims blob and pretend to be user A, one tab for user B. Then I run…