2
Admin access to impersonate specific user for RLS leveraging
Source: supabase/supabase#26356 · opened by @thebadking
I am thinking of writing a service that has some complex data processing, this service would do separate calculations for each user, using RLS for the user interaction is trivial since Authorization takes care of accessing data with the right ownership or access rights, but when we talk about a service I would have to include the user and join in every query, opening a door for a myriad of issues/problems/datasecurity, I was thinking if the service user could impersonate the user, iterating through those users would be trivial and since RLS would filter out the data this would make the queries much cleaner and safer. What do you guys think?
No pledges yet. Be the first to back this.
Comments
Similar requests
Better protection against failing to protect tables with RLS
1 vote · 0 comments
Surface user impersonation in SDKs
3 votes · 0 comments
Add Feature to Test + Debug Row Level Security Policies
47 votes · 0 comments
Default RLS Policies.
3 votes · 0 comments
Move RLS verification into the policy editor, not beside it
1 vote · 0 comments
No comments yet.