User-Scoped Data Filtering

关于

This skill provides a comprehensive framework for managing data privacy and security in multi-user web applications. It offers standardized patterns for extracting user context from JWTs, applying scoped database queries, and enforcing resource ownership to prevent unauthorized data access. Whether you're building a simple task manager or a complex multi-tenant enterprise platform, it provides the necessary architectural guidance to implement admin bypass functionality and audit trails, ensuring your Python-based backend remains both secure and maintainable.

主要功能

• Standardized user context extraction from authentication tokens
• Safe administrative bypass and data access audit logging
• SQLAlchemy patterns for automatic scoped database filtering
• Multi-tenant architecture support for organization-level scoping
• Ownership verification via decorators for secure write operations
• 0 GitHub stars

使用场景

• Implementing secure administrative tools with full data access and audit trails
• Restricting users to only see and manage their own data in a SaaS application
• Building a multi-tenant platform where data must be isolated by organization