chihlasm/resolutionflow
1
0
Fork 0
Code Issues 23 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

docs: broaden admin_database docstring to cover non-admin BYPASSRLS use cases

Browse Source 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
chihlasm
2026-04-10 06:51:53 +00:00
parent ac2b193909
commit 4f4bc435da
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
backend/app/core/admin_database.py
View File

@@ -2,8 +2,10 @@
""" """
Admin database engine — connects as resolutionflow_admin (BYPASSRLS). Admin database engine — connects as resolutionflow_admin (BYPASSRLS).
Use ONLY for /admin/* endpoints and internal tooling. Use ONLY where explicit application-level access control makes database-layer
Never use this engine from user-facing endpoints. tenant filtering unnecessary: /admin/* endpoints, internal tooling, and public
endpoints that enforce their own authorization before returning data (e.g.
share access via opaque token + visibility check).
""" """
from collections.abc import AsyncGenerator from collections.abc import AsyncGenerator