Case Study: WorkOS Ticketing System achieves row-level security with WorkOS FGA and Postgres

WorkOS FGA and Postgres Ticketing System implements row-level security with WorkOS in 4 steps

The customer, WorkOS FGA and Postgres Ticketing System, needed to ensure users of its multi-tenant support ticketing platform could only view tickets they were authorized to see. This challenge involved protecting sensitive data from multiple organizations and required a solution that could enforce complex permissions for different user roles, including admins, support agents, and customers.

WorkOS implemented its Fine-Grained Authorization (FGA) product, integrating it with the customer's existing Postgres database. The solution used a pre-filtering approach where FGA first determined which ticket IDs a user could view, which were then used in a SQL WHERE clause to fetch only authorized data. This ensured robust row-level security without altering the database schema, allowing each user role to see the appropriate tickets while maintaining performance and data integrity.