Talktodre-ops

multi-tenant-isolation

Talktodre-ops/claude-skills/multi-tenant/SKILL.md

Blueprint for keeping one tenant's data out of another tenant's view in a shared-database SaaS. The active tenant is resolved only from an explicit request header, verified against membership, and never guessed. The data boundary is the queryset filter, not the permission class. Postgres row-level security is the defense-in-depth backstop, with the load-bearing role switch and the cast and connection-reuse gotchas that make it actually work. Plus the frontend org context that emits the header, the tenant-id and object lockstep that prevents unscoped requests, and the cross-user cache wipe for shared browsers. Use when building or auditing per-tenant or per-organization data isolation on a Django and React stack.