Skip to main content

Row-level security denies an empty value

By Steven Van ·

Rules checking signed-in user information previously could match records with missing fields, potentially exposing unintended data.

Missing user information could previously let a row-level security rule in Base44 match records whose field was also missing, potentially exposing more data than intended.

Following the September 2 update, rules that check a value from the signed-in user deny access if that value is empty or cannot be resolved. Base44 links to its data management documentation for more information.

Base44
Base44
AI app builder — describe what you want and get a fully functional web app in seconds, no coding required.
View Base44 →

Original source

Read Row-level security denies an empty value on Creators Toolbox