UUUduak Ukponginuduakukpong.hashnode.dev·Sep 24 · 9 min readWhy a Postgres View Can Silently Bypass Row-Level SecurityQuerying a reporting view returned a project's real task counts to a user with zero membership in that project. Row-level security should have scoped that row out. It came back anyway, because the vie00
UUUduak Ukponginuduakukpong.hashnode.dev·Sep 15 · 10 min readRow-Level Security for Multi-Tenant Postgres: USING vs WITH CHECK in PracticeThis piece isn't about turning RLS on. It's about what goes inside the policies once it is, and about proving they do what you think they do instead of just trusting the SQL. That distinction matters 00
UUUduak Ukponginuduakukpong.hashnode.dev·Sep 13 · 11 min readBuild a Postgres Audit Log Your Application Code Cannot BypassMost audit logs get written by application code. A service function calls the database, then calls a logging function right after, two separate steps, two separate places to remember. Forget the secon00
UUUduak Ukponginuduakukpong.hashnode.dev·Sep 10 · 11 min readStop Using a mounted Flag to Fix Theme Flash: Use useSyncExternalStore InsteadThe login page went blank in production. Not a broken layout, not a missing stylesheet. Blank: the whole subtree that the sidebar belonged to just disappeared from the DOM right after the page finishe00