Skip to content

fix: Tenant data isolation is not reliably enforced — reads, aggregates, and - #1370

Open
Netty-kun wants to merge 7 commits into
rinafcode:mainfrom
Netty-kun:security/issue-1219-tenant-data-isolation-is-not-reliably-enforced
Open

fix: Tenant data isolation is not reliably enforced — reads, aggregates, and #1370
Netty-kun wants to merge 7 commits into
rinafcode:mainfrom
Netty-kun:security/issue-1219-tenant-data-isolation-is-not-reliably-enforced

Conversation

@Netty-kun

Copy link
Copy Markdown

Summary

This pull request implements the changes requested in #1219.

Changes

  • test/tenant-isolation.e2e-spec.ts
  • src/middleware/tenant/tenant-rls.subscriber.ts
  • src/tenancy/isolation/isolation.service.ts
  • src/middleware/tenant/tenant.middleware.ts
  • src/audit-log/services/audit-reporting.service.ts
  • src/audit-log/audit-log.service.ts
  • src/migrations/1710000000000-enable-tenant-rls.ts

Testing

Verified against the issue acceptance criteria.

Closes #1219

@drips-wave

drips-wave Bot commented Aug 29, 2026

Copy link
Copy Markdown

@Netty-kun Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@RUKAYAT-CODER

RUKAYAT-CODER commented Aug 29, 2026

Copy link
Copy Markdown
Contributor

Well done on the job done so far!
Kindly fix workflow to pass.
Run Npm run lint to view and fix errors

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Tenant data isolation is not reliably enforced — reads, aggregates, and background jobs bypass RLS

2 participants