SLSarika Lalinsarikalal.hashnode.dev·12h ago · 7 min readDoes AI Create Trust or Uncertainty?During a conversation with a prospective customer, a question came up that stayed with me. They wanted to understand what would happen to their institution's data if AI were introduced into the softwa00
FMFady Mondyin3x1.hashnode.dev·14h ago · 6 min readHow to Ship an Official MCP Server for Your SaaS in 2 WeeksOriginally published at fadymondy.com. Your customers are starting to ask a new question in sales calls and support tickets: "Does it work with Claude?" Sometimes it is ChatGPT or Cursor instead, but 01A
ABAuth By Exampleinauthbyexample.hashnode.dev·17h ago · 1 min readYour breadcrumb trail can name folders the viewer can't openBreadcrumbs usually walk parent_id links from the current record up to the root and render each title from a cached path or a join on folders. That walk often skips the same read check the folder page00
KKKamran Khaninkamrankhandev.hashnode.dev·19h ago · 3 min readRole-based access with one reusable middleware (and a frontend guard to match)Role checks have a way of rotting. It starts innocently — an if ($user->role !== 'admin') in one controller. Then it's in five controllers, then someone adds a moderator role and you're grepping the c00
KKKamran Khaninkamrankhandev.hashnode.dev·19h ago · 3 min readOne axios client for every API call: Bearer injection and 401 auto-logoutEvery React app I've inherited has the same disease: auth headers sprinkled across twenty files. One component reads the token from localStorage, another forgets, a third hardcodes the API URL. Then t00
KKKamran Khaninkamrankhandev.hashnode.dev·19h ago · 3 min readYour SaaS should survive a page refresh: how session restore actually worksNothing kills trust in a dashboard faster than this: you log in, everything works, you hit refresh — and for a split second you're staring at the login page. Then it flickers back. Or worse, it doesn'00
ABAuth By Exampleinauthbyexample.hashnode.dev·19h ago · 1 min readYour activity feed can show events from records the viewer can't openActivity feeds often pull from an events table ordered by created_at, scoped by workspace_id. The event row stores a title snapshot and a record_id. The feed renders the snapshot without checking whet00
ABAuth By Exampleinauthbyexample.hashnode.dev·21h ago · 1 min readYour label counts can include records the list already hidFacet chips next to a list often run a separate COUNT GROUP BY label query. The table under them filters by tenant and role. The facet query only groups by label_id. After a role change, "Confidential00
ANAhsan Nadeeminznovastudio.hashnode.dev·1d ago · 7 min readMulti-Tenant SaaS Architecture on PostgreSQL: Silo, Bridge or Pool?The first big architecture decision in any B2B SaaS is how to keep one customer's data away from another's. Get it right and it disappears into the background. Get it wrong and every new feature carri02AA
ABAuth By Exampleinauthbyexample.hashnode.dev·1d ago · 1 min readYour chart can plot rows the table view would hideDashboard charts often hit a separate aggregate query. The table under the chart filters by tenant and role. The chart endpoint sums revenue with only the date range from the URL. After a role change,00