Shipping Multi-Tenant SaaS Using Postgres Row-Level Security
Is having to write "SELECT [...] WHERE user_id=" really considered a security hole? Isn't that how like every service in existence operates? Coming up with complicated auth systems and patterns just because you are scared you will accidentally skip that WHERE clause seems bizarre to me.