Row-level security and access · AutessaDB
Sharing and access levels
Every AutessaDB table starts private to its owner and is shared with people, teams, company roles or everyone at your company at READ, WRITE, PUBLISH or ADMIN. Access adds up, so someone covered by several grants gets the highest one, and security roles then narrow which rows and columns each person sees.
-- the problem
Data should be shareable without being exposed
Teams need to share a table to work together, but sharing should not mean everyone sees every row. AutessaDB separates the two dials: sharing decides who can use the table, roles decide what each person sees in it.
What you get
- READ views the schema and reads rows; WRITE inserts, updates and deletes; PUBLISH adds triggers; ADMIN changes the schema, shares and deletes.
- Share with individuals, teams, company roles or the whole company, each at its own level.
- The tables list shows All Tables, My Tables, Company Shared and Shared With Me.
- get-sharing-details shows exactly what share and update-settings would change, without changing anything.
- Ownership transfer is owner-only, and the owner always has ADMIN.
- Tables managed for you, such as a connector's tables or an app's sign-in users table, follow their parent's sharing.
-- how it works
How does sharing and access levels work in AutessaDB?
Open Share
From the table, open the Share dialog.
Pick who and how much
Add people, teams, roles or the company, and choose a level for each.
Narrow with a default role
For sensitive tables, set a default role so grantees see only their rows.
-- every option
Access levels on a table
| option | what it does |
|---|---|
| READ | View the schema and read rows: get, query, join and semantic search. |
| WRITE | Insert, update and delete rows. |
| PUBLISH | Add triggers (not row writes; editing or disabling triggers needs ADMIN). |
| ADMIN | Change the schema, share the table and delete it. |
| Data lake tables | READ queries, WRITE loads and appends, ADMIN changes schema and semantic layer. |
-- example
Full reference in the AutessaDB CLI docs and the API reference.
-- permissions
Who can do what?
| access | can |
|---|---|
| Owner | Everything, including transferring ownership. |
| ADMIN | Share and set table security settings. |
-- faq
Questions about sharing and access levels
Does PUBLISH let someone write rows?
No. PUBLISH adds triggers. Writing rows needs WRITE or ADMIN.
What if someone has two grants?
Access adds up: they get the highest level among their grants.
Can I see what a share change would do first?
Yes. get-sharing-details is a read-only view of exactly what share and update-settings would modify.
100% customizable, code and all
Make AutessaDB fully your own.
Use it out of the box, then change anything. Ask Autobot, Autessa’s AI builder, for a new field, screen, report, workflow or agent and it builds it into your copy of the app. Or open the code and edit it yourself. Nothing is locked: the app, its data and its code are yours.
Start free and make it yours