Skip to content

M2b: route every request to its tenant's schema (BR-36) #93

Closed

Description

@amar-python

Part of ART Milestone 2 (BR-36; decision 6: schema per tenant).

  • Each request resolves to exactly one tenant, from the session (or from a service key bound to one tenant).
  • The registry, audit log and dynamic tables live in the tenant's schema. Creating a tenant creates its schema and runs its migrations.
  • GET /api/csv/files, uploads, deletes, table reads and the audit log only see the caller's tenant.

Verified by: standing cross-tenant negative tests (tenant A cannot list, read, delete or overwrite tenant B's files, tables or audit rows).


Generated by Claude Code

Activity

  1. added this to the ART extension milestone on Oct 26, 2026
  2. amar-python commented on Oct 26, 2026

    @amar-python
    OwnerAuthor

    Decided 26 Oct by the product owner: T&E mode is per tenant. Each tenant gets its own copy of the T&E tables, created with the tenant. Evals keep using a test tenant.


    Generated by Claude Code

  3. added a commit that references this issue on Oct 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    artART framework extension workenhancementNew feature or request

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions