Codexportfolio intelligence
Capabilities/UserMgmt

Multi-tenant Isolation

Per-tenant data isolation via a workspace_id foreign key + a global scope on every model, plus middleware that resolves the current workspace from subdomain, header, or session. Background jobs serialize the tenant so a queue worker can't leak across tenants. Tested against the "wrong tenant" assertion in feature tests — defence-in-depth against scope drift.

7 projects carry this capability.

Projects

Multi-tenant Isolation — Codex