News for hackers. Stuff that matters.
Re:Show HN: InstantDB – A Modern Firebase by h_tbob on Thursday August 22, 2024 @02:14PM (#41322958)
These ideas are cool but I wonder how security works. Do you do like rate limiting and stuff like that?
Re:Show HN: InstantDB – A Modern Firebase by stopachka on Thursday August 22, 2024 @02:55PM (#41323347)
Hey h_tbob,

We built a permission system on top of Google's CEL [1]. Every object returned in a query is filtered by a 'view' rule. Similarly, every modification of an object goes through a 'create/update/delete' rule.

You can learn more about the rules language in the permission docs: https://www.instantdb.com/docs/permissions

[1] https://github.com/google/cel-java