FeatureFuel
2

Admin access to impersonate specific user for RLS leveraging

Source: supabase/supabase#26356 · opened by @thebadking
I am thinking of writing a service that has some complex data processing, this service would do separate calculations for each user, using RLS for the user interaction is trivial since Authorization takes care of accessing data with the right ownership or access rights, but when we talk about a service I would have to include the user and join in every query, opening a door for a myriad of issues/problems/datasecurity, I was thinking if the service user could impersonate the user, iterating through those users would be trivial and since RLS would filter out the data this would make the queries much cleaner and safer. What do you guys think?

No pledges yet. Be the first to back this.

Make a pledge

Pledge your monetary support if this feature is added.

$

Comments

No comments yet.

Replying to

Add a comment

What do you think about this feature request?


Similar requests