Authorization model
MindShield supports hierarchical organizations, memberships, roles, permissions and optional descendant scope. Access decisions should be explicit rather than based on hidden UI assumptions.
Defense in depth
Role-based permissions
Administrative functions are mapped to permission-bearing membership roles.
Organization scope
Users operate within assigned organization boundaries and approved descendant scope.
Secure database sessions
Application requests establish database context through controlled session infrastructure.
Non-bypass application role
The production application database role is designed without superuser and RLS-bypass privileges.
Administrator responsibilities
- Assign the minimum permissions necessary.
- Remove stale memberships promptly.
- Protect administrator accounts and endpoints.
- Review audit and operational events.
- Separate daily operations from high-privilege administration where practical.