Workaround · Permissions & security · Blocks work
Organization and team based multi-tenant permissions are hard to model
1 source thread · first seen 2020-04
Summary
Modeling organization, team or multi-tenant permissions was one of the biggest pain points; the usual advice is to filter on a session variable, and a community member found a way to avoid needing one.
- Affects
- teams building multi-tenant apps
- Workaround
- Use a session variable such as an organization id header in permission filters
Evidence
Excerpts are copied word for word from the source; follow the link to read it in full.
“One of the biggest pain points I found was modeling Organization/Team/Multi-Tenant based permissions”