SaaSmulti-tenantreal-timePWA
Multi-tenant school console — attendance, fees, messaging, assignments, emergency alerts. Tenant isolation enforced by the database itself, not the app code.
VERIFIED · codebase
Postgres
FORCE ROW LEVEL SECURITY on every tenant table, scoped per request with SET LOCAL app.current_school_id. A query for one school physically cannot return another's rows — enforced below the application, in the engine.
-- every tenant table, no exceptions
ALTER TABLE attendance ENABLE ROW LEVEL SECURITY;
ALTER TABLE attendance FORCE ROW LEVEL SECURITY;
CREATE POLICY tenant_isolation ON attendance
USING (school_id = current_setting('app.current_school_id')::uuid);
-- scoped per request, before any query runs
SET LOCAL app.current_school_id = '…';