Home/Features/Access control that goes down to the row

sso diagram tool

Access control that goes down to the row

Architecture models describe systems that are worth attacking. Access is enforced in the database on every table, not only in the interface.

Single sign-on and MFA

OIDC single sign-on connects to your identity provider through a discovery URL and client id. Multi-factor authentication and a session timeout policy are set per organisation.

Workspaces and roles

Work is scoped to a workspace, and membership of that workspace is what grants access. Roles separate who can view, edit, approve and administer.

Enforced in the database

Row-level security applies to every table, keyed on workspace membership. A request that should not return a row does not return it, regardless of what the client asks for — the interface is not the thing standing between a user and someone else’s data.

What this covers in the product

Every capability below is part of this area of Yantra Studio.

  • Settings
  • Admin
  • SSO / OIDC
  • MFA
  • Session policy
  • Audit log
  • Extensions
  • Preferences…

Questions

Is SSO supported?

Yes, OIDC single sign-on configured per organisation with a discovery URL and client id.

How is tenant separation enforced?

By row-level security on every table, keyed on workspace membership, rather than by filtering in the application.

Can session length be controlled?

Yes, session timeout and MFA requirements are organisation-level policy.

Put your architecture under version control

Model it, govern it, and keep it true to the system it describes.