Skip to content
corpus.blog
Claim your blog
Record · corpus.blog/posts/01a0fad1-9c2f-7007-ac90-31991c769d23

Hand the application a query filter, not a per row authorization decision

Cerbos Blog · published 1 October 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at cerbos.dev (opens in a new tab) Wayback capture (opens in a new tab)

0blogs citing

First cited
—
Most recent
—
Rank this month
not ranked
External links
4
Words captured
2,088

Cited by

No blog we hold has cited this post yet.

Similar posts

What's new in CYPEX v2.0.0: tenancy moves from the query to the catalog
CYBERTEC PostgreSQL
15 Sept 2026
My Postgres RLS policy ran its permission check 28,765 times per query
ddz.dev
24 Sept 2026
The User Could See the Button. Why Couldn’t They Access the Data?
Python in Plain English
30 Sept 2026
Read Restrictions and Catalog Labels: Unifying governance across engines and catalogs
Databricks
1 Oct 2026
Custom Authorization Policies with `@policy` in Hive Router
the-guild.dev
1 Sept 2026
Authorization
kieranpotts.com
24 Sept 2026
Let Postgres Enforce Tenant Isolation
milanjovanovic.tech
12 Sept 2026
'Can Jane open this file?' asked millions of times a second, across nested groups. How Google's Zanzibar answers it fast
prateekcodes.com
21 Sept 2026
Inspect the context before a security agent runs
Siddhant Khare · Sustainable AI-Assisted Engineering
4 Oct 2026
pg_redact: Content-aware PII redaction with Jev, enforced in Postgres
neon.com
1 Oct 2026

Links from this post

Link
Host
Elsewhere on cerbos.dev (17)
Why external authorization is essential for modern software architecture Read at the source (opens in a new tab)
cerbos.dev
https://docs.cerbos.dev/cerbos/latest/recipes/filtering-resources.html
docs.cerbos.dev
https://docs.cerbos.dev/cerbos/latest/policies/conditions.html
docs.cerbos.dev
Unlocking efficient authZ with Cerbos’ Query Plan Read at the source (opens in a new tab)
cerbos.dev
Filtering database results with Cerbos query plans Read at the source (opens in a new tab)
cerbos.dev
https://www.cerbos.dev/product-cerbos-synapse
cerbos.dev
https://docs.cerbos.dev/synapse/latest/extensions/route-extensions.html
docs.cerbos.dev
https://docs.cerbos.dev/cerbos/latest/recipes/query-plan-adapters/index.html
docs.cerbos.dev
https://www.cerbos.dev/blog/trino-row-filtering-column-masking
cerbos.dev
Authorization Challenges in a Multitenant System Read at the source (opens in a new tab)
cerbos.dev
https://docs.cerbos.dev/cerbos/latest/policies/resource_policies.html
docs.cerbos.dev
https://www.cerbos.dev/ecosystem/cerbos-postgresql
cerbos.dev
RBAC vs ABAC - Which is better for your use case? Read at the source (opens in a new tab)
cerbos.dev
https://docs.cerbos.dev/synapse/latest/
docs.cerbos.dev
https://www.cerbos.dev/workshop
cerbos.dev
https://solutions.cerbos.dev/building-a-scalable-authorization-system
solutions.cerbos.dev
https://solutions.cerbos.dev/how-to-adopt-externalized-authorization
solutions.cerbos.dev