is this good rls structure?

I have a multi tenant app, each in ever table I have there’s a business_id column

So for every user from each business, I give them a user named like this “business1–admin-johndoe” then I add that user to group “business1”

Then I grant group “business1” access to every row with business_id = business1

Let’s say johndoe is resigning and I need to revoke his access

I just have to revoke him from the role right right?

Is this possible? I am not that familiar with rls

garyaustin•1/4/24, 1:43 AM

You would need to provide more info on how you are storing role.

garyaustin•1/4/24, 1:45 AM

I'm working on few table based role/group things here and discuss RLS required for best performance. https://github.com/GaryAustin1/custom-properties

Ryann•1/4/24, 2:27 AM

I would assume from what you have mentioned you would likely be better off having a role field rather than linking a string with hyphens.

Then check something like
business_id === business AND role === 'admin'

Ryann•1/4/24, 2:27 AM

Then to revoke you simply modify their role

is this good rls structure?

Similar Threads

Similar Threads

Similar Threads