Some Postgres apps isolate tenants by schema (one schema per tenant) rather than a tenant column + RLS. Detect this layout and provide a matrix/fuzz mode that verifies a role scoped to schema A cannot reach schema B. Distinct ICP from column-based RLS.
Some Postgres apps isolate tenants by schema (one schema per tenant) rather than a tenant column + RLS. Detect this layout and provide a matrix/fuzz mode that verifies a role scoped to schema A cannot reach schema B. Distinct ICP from column-based RLS.