Row Strategy (Shared Table ORM Scoping)¶

The row strategy stores all tenants in a single shared database and shared tables in the public schema. Data isolation is enforced dynamically at the SQLAlchemy ORM layer.

TENANCY_DB_STRATEGY=row

Secret Configuration Shape¶

All tenants point to the same shared database. No schema_name is required, but credentials must still be present for every tenant:

{
  "spotify": {
    "tenant_id": "spotify",
    "database_config": {
      "database_uri": "postgresql+asyncpg://shared_user:password@localhost:5432/fastkitty_shared",
      "host": "localhost",
      "port": 5432,
      "username": "shared_user",
      "password": "password",
      "database_name": "fastkitty_shared"
    }
  }
}

How It Works Under the Hood¶

1. Automatic Query Filtering (`with_loader_criteria`)¶

When any ORM query is executed (e.g. session.scalars(select(BlogPost))), FastKitty intercepts the query compilation and appends an automatic filter:

WHERE blog_posts.tenant_id = :current_tenant_id

Even if a developer forgets to add .where(BlogPost.tenant_id == ...) in a service query, the tenant filter is guaranteed.

2. Automatic Write Stamping¶

When a new model inheriting from TenantScopedModel is added to the session, FastKitty automatically sets:

model.tenant_id = current_tenant_id

3. Cross-Tenant Mutation Guards¶

If code attempts to update or delete a model instance whose tenant_id does not match the active request's tenant, FastKitty raises a security error before the SQL flush occurs.