Row-level security
Requests do not connect as the service role. Each transaction sets the acting identity, so Postgres policies apply — a bug in the API cannot become data loss.
shipped
New Orange CMSRequests do not connect as the service role. Each transaction sets the acting identity, so Postgres policies apply — a bug in the API cannot become data loss.
shipped