Definition
A database security feature that restricts access to specific rows in a table based on the user's authenticated identity.
Why It Matters
In a multi-tenant SaaS, you NEVER want Customer A to see Customer B's data. RLS enforces this at the database engine level, so even if your API code has a bug, the data remains secure.
How It Works
- 1
A policy is defined in SQL: `CREATE POLICY ON data USING (auth.uid() = user_id)`.
- 2
Every query is automatically filtered by this policy.
- 3
The application code doesn't need to manually add `WHERE user_id = X` to every query.
The NetForce Take
We enable RLS on every Postgres table by default. It's the gold standard for B2B SaaS security.