Enforce communityId in MongoDB query filters for multi-tenant isolation.
npx skills add https://github.com/muhammadcaeed/aegis --skill tenancy-enforcer
Please help me install this Agent Skill. Skill: tenancy-enforcer Source: https://github.com/muhammadcaeed/aegis/tree/main/.claude/skills/tenancy-enforcer.md Command: npx skills add https://github.com/muhammadcaeed/aegis --skill tenancy-enforcer
Multi-tenant data isolation by enforcing communityId in every database filter, preventing cross-tenant access.
Apply this skill to all MongoDB interactions by ensuring every query includes communityId from the JWT context.
High-intent search queries and answers about installing and using this skill.
Multi-tenant data isolation in MongoDB queries is enforced by requiring a communityId field in every database filter. This prevents cross-tenant access by ensuring all find, update, delete, and aggregate operations are scoped to the correct tenant.
CommunityId should come from the JWT context to prevent tenants from spoofing access to other communities. Extracting it from authenticated controller context rather than user-supplied request bodies ensures consistent and secure tenant scoping across all repository methods.
The best way to prevent cross-community access is applying repository and service patterns that consistently inject communityId into all database operations. This approach standardizes tenancy rules across code paths and highlights common anti-patterns to avoid insecure queries.
Yes, multi-tenant isolation applies to MongoDB aggregate operations, find, update, and delete queries. Strict data isolation requires communityId to appear in every database filter to prevent cross-tenant access across all operation types.
Common anti-patterns include omitting communityId from database filters, accepting it from request bodies, and applying inconsistent tenancy rules across code paths. These insecure queries allow cross-tenant data access and break strict multi-tenant isolation.
muhammadcaeedDefine standardized NestJS backend module structures with MongoDB and Docker patterns.
findinfinitelabsManage Chuukese dictionary entries, phrases, and translation pairs in Cosmos DB or MongoDB.
okgoogle13Audit codebases for security vulnerabilities and code quality issues.
patricio0312revEnforce tenant isolation in PostgreSQL with RLS and Prisma.
