Tuna

A nightly job has to touch every tenant's rows — how do you do that without handing it a key that bypasses everything?

Multi tenant Postgres with row level security on every table, which works well for requests coming from a signed in user. The problem is the background work. A nightly aggregation, a webhook handler, and a job that…