Back
Row level security
Hello how would you handle a row level security?
For example I have a projects table that has a ownerId and a second table called members that stores a user/project id How would you make it so only members could update the project?
TL;DR
Old backend: User verification in members table using ExpressJS code.
Creating a time tracking app with Projects and TimeEntries tables.
Wants to implement row level security to only allow members to insert or update time entries for specific projects. I'm making a time tracking app so i store the following items:
Projects:
- title
- ownerId TimeEntries:
- start/end datetime
- projectId
- userId
I would like so only members could insert a time entry for a certain project
in my old backend code (expressJS) I just made sure that the user was inside of the members table
