How I approached multi-tenancy in Next.js with PostgreSQL RLS

Multi-tenancy looks simple at first. You add an organization_id to your tables, check it in your queries, and move on. The problem is that this puts a lot of responsibility on application code. I wanted tenant isolation to be enforced at the database level too, so I used PostgreSQL Row Level Security (RLS). The basic architecture is: Users belong...