BusinessModule 07
Permissions & data rules
Visual walkthrough
Who gets through the gate
Who is knocking
no session
The notes table
0 of 4 readable
Maya••••• ••••• ••••••••
Maya••••• •••• •••••
Sam••••• •••••• ••••••
Sam••••• ••••••• •••••
No session, no rows. The gate is the database, not the login page.
Authentication asks who you are; permissions ask what you may touch. Row-level rules in the database are the real wall.
Interactive demo
Pick a sign-in method
Sign-in method
MMayasigned in
- Dentist Tuesday 9am
- Pay the gas bill
- Call mum back
SSamsigned in
- Renew passport
- Gift idea: film camera
- Salary review notes
Row-level rules
The database decides which rows each signed-in person may read.
table · notes6 rows
| id | owner | body | visible to |
|---|---|---|---|
| n_01 | maya | Dentist Tuesday 9am | →Maya only |
| n_02 | sam | Renew passport | →Sam only |
| n_03 | maya | Pay the gas bill | →Maya only |
| n_04 | sam | Gift idea: film camera | →Sam only |
| n_05 | maya | Call mum back | →Maya only |
| n_06 | sam | Salary review notes | →Sam only |
What makes this work
01
Roles
Stored apart from profiles
02
Row rules
Each user sees only their rows
03
Server checks
Never trust the screen
Related concepts