“For most applications, PocketBase's built-in API Rules are sufficient.”
+ built-in row-level access control
“PocketBase supports both row-level access control and role-based access control out of the box.”
+ built-in role-based access control
“PocketBase supports both row-level access control and role-based access control out of the box.”
+ no custom authorization middleware needed
“You generally don't need to implement your own authorization middleware.”
+ automatic record filtering
“PocketBase automatically filters the results.”
+ no custom backend authorization code for common scenarios
“No custom backend authorization code is necessary for these scenarios.”
+ suitable for multi-tenant SaaS applications
“This is particularly useful for multi-tenant SaaS applications.”
− no database-level RLS
“Database-level RLS | No | Yes”
− API rules enforced at API layer rather than native PostgreSQL RLS
“PocketBase's API Rules are enforced at the API layer, rather than through PostgreSQL's native RLS mechanism.”