Membership RLS Policy Configuration
Component Detail
Infrastructure
high complexity
backend
0
Dependencies
0
Dependents
5
Entities
0
Integrations
Description
Supabase Row Level Security policy definitions that govern cross-organization data access for multi-membership users. Policies are carefully scoped to allow deduplication service queries across affiliated organizations while enforcing strict data isolation for all other access patterns.
membership-rls-policy
Responsibilities
- Define RLS policies for user_organization_memberships table
- Allow self-read of own memberships across all affiliated orgs
- Restrict cross-org activity reads to deduplication service only
- Block lateral data access between organizations for regular queries
- Provide audit trail for cross-membership query authorizations
Interfaces
applyMembershipReadPolicy()
applyDeduplicationQueryPolicy()
applyMembershipWritePolicy()
validateRlsCompliance(query)
auditCrossOrgAccess(userId, orgIds)
Related Data Entities (5)
Data entities managed by this component