What is row-level security?
Row-level security is a database capability that attaches policies to tables, so a given session can only read or write rows matching a condition. The database enforces it regardless of what the query asked for.
Its advantage over application filtering is that it fails closed. A query that forgets its tenant predicate returns nothing rather than everything, and a SQL injection that escapes the query still cannot escape the policy.
The cost is that sessions must carry the right context, and that context must come from an authenticated source rather than a parameter the caller controls.
Tenant scope is set as a database session setting derived from the validated token, then enforced by policy on every scoped table.
Related terms
- Multi-tenancy — One deployment serving many customers, with each customer’s data isolated from the others.
- Audit trail — A durable record of what a system did, who caused it, and what it touched — sufficient to reconstruct events afterwards.
See it working rather than described.
The product demo runs one agent across three systems and stops at the approval gate.