This solution will violate the GDPR issue. Is there not any possible solution for completely different tenant or database connection? Like, based on the front end or based on some initial loading/requests of API from the front end, can Strapi can connect to only one DB or a specific tenant? Inn this way, we wont need to be concern on separating query or permissions. Also, this approach is perfect for those organisations who have their own roles and permissions.
1 Like