Type-Safe Row-Level Security with Multi-Tenant Isolation Modes
Year: 2026
Type: article
Abstract: We present a multi-tenant database architecture with Row-Level Security (RLS) that uses type-safe Rust enums for policy expression evaluation, combined with three configurable isolation modes (SharedSchema, DatabasePerTenant, SchemaPerTenant). Our system features compile-time verified RLS expressions, thread-local tenant context management with RAII cleanup patterns, sliding window rate limiting for quota enforcement, and integrated Change Data Capture (CDC) for tenant migrationwith consistency verification. This architecture enables secure multi-tenant deployments with flexible isolation strategies while maintaining type safety throughout the RLS evaluation pipeline.
Author: Moya Vaca, Daniel
Language: English
Topic: Access Control and Trust
Subfield: Sociology and Political Science
Field: Social Sciences
Domain: Social Sciences
Open Access status: green
OpenAlex ID: W7141414458
FWCI:
Cites:
Cited by:
Related to: