security-rbac

Security must be implemented at the database layer (Defense in Depth), ensuring that even if the application layer is compromised, the data remains protected by strict access controls.

1.1 Standard Roles Implement a hierarchy of roles to categorize users. Avoid assigning permissions to individual users; assign them to Roles.

Use RLS to strictly enforce data isolation at the row level based on the current user context.

مشغل سياسات أمان قاعدة البيانات وRBAC والتحكم في الوصول: عند تنفيذ التحكم في الوصول المستند إلى الدور. المصدر: poletron/custom-rules.