Keep Prisma Queries Inside the Right Customer Account: 7 Checks
A tenant-isolation review may start with one question: “Does every query include tenantId?” That catches the obvious failure and misses several others. A filter can exist but come from the client. It
ivibe.hashnode.dev7 min read