- Updated comments in LeadsListScreen, MoreScreen, TaskDetailScreen, TaskFormScreen, TasksListScreen, TicketAnalyticsScreen, TicketDetailScreen, TicketsListScreen, ApiService, AuthService, CrashReporting, DealCard, TicketCard, MultiSelectSheet, KanbanColumn, StageStepper, TicketApprovalPanel, TicketPropertiesCard, and TicketTimePanel to improve readability and maintain a consistent style. - Adjusted punctuation and phrasing for better flow and understanding.
17 lines
1.1 KiB
Markdown
17 lines
1.1 KiB
Markdown
# PostgreSQL Row-Level Security (RLS) Setup Guide
|
|
|
|
This file has moved into the documentation site. See
|
|
[PostgreSQL and RLS](docs/self-hosting/postgresql-and-rls.md) for the full guide: creating the
|
|
non-superuser application role, how RLS policies are enabled by migrations, verifying isolation
|
|
with `manage_rls`, Celery's `set_rls_context`, and the mistakes that most often leave a deployment
|
|
unprotected.
|
|
|
|
Two related pages worth knowing about too: [Security hardening](docs/self-hosting/security-hardening.md#database-role)
|
|
covers the database role as part of a production checklist, and
|
|
[Troubleshooting](docs/self-hosting/troubleshooting.md) covers the specific symptoms of a
|
|
misconfigured role (empty admin lists, data visible across organizations, and more).
|
|
|
|
This file is kept only so existing links to `RLS_SETUP.md` keep resolving; it is not maintained
|
|
as a setup guide in its own right. Notably, the number of RLS-protected tables cited in earlier
|
|
versions of this file (24) was out of date. The current, verified count is documented on the
|
|
linked page rather than repeated here, precisely so this file can't drift out of sync again.
|