DEV Community

Discussion on: Users, Roles, Groups

Collapse
 
mads_hansen_27b33ebfee4c9 profile image
Mads Hansen

Postgres RBAC is genuinely underused. So many apps just use a single superuser connection because it's easier to set up — then wonder why a bug in one service can wipe another's data.

Row-level security is the next step after roles — once you've modeled who can do what at the role level, RLS lets you push the 'which rows' logic into the database itself. Dramatically simplifies application-level access control.