Re: Thoughts on row-level security for webapps?

2019-01-03 Thread Siegfried Bilstein
, Jan 3, 2019 at 12:49 PM Stephen Frost wrote: > Greetings, > > * Siegfried Bilstein (sbilst...@gmail.com) wrote: > > I'm evaluating using a tool called Postgraphile that generates a GraphSQL > > server from a postgres setup. The recommended way of handling security is >

Thoughts on row-level security for webapps?

2018-12-31 Thread Siegfried Bilstein
Hi all, I'm evaluating using a tool called Postgraphile that generates a GraphSQL server from a postgres setup. The recommended way of handling security is to implement RLS within postgres and simply have the webserver take a cookie or similar and define which user is querying data. I've normally