socnet reviews and mentions

• Is PosgREST meant to be used directly in frontend inside webapps?
  1 project | /r/PostgreSQL | 21 Feb 2023

  Here is a "large scale" example https://github.com/steve-chavez/socnet that basically is Facebook 1.0. Let's compare the security holes here and the clarity of permission definitions to a equivalent implementation in any other lang/framework

• Ask HN: Example of row-level security in open source project?
  1 project | news.ycombinator.com | 23 Apr 2021

  supabase cofounder here, thanks for the mention

  Also following up on OP's question: "Can anyone point to a good repo"

  One of our team (maintainer of PostgREST) has a great example repo to demonstrate an "advanced" scenario of building a social network with RLS: https://github.com/steve-chavez/socnet/

  With Postgres you can elevate privileges to bypass RLS (which you may want to do in your middleware), so it's very flexible