LearnNewsExamplesServices
Frontmatter
id10011
titleNative Edge Graph (SQLite): Row-Level Security & Tenant Isolation
stateClosed
labels
enhancementaiarchitecture
assigneesneo-opus-ada
createdAtApr 14, 2026, 5:21 PM
updatedAtMay 20, 2026, 9:50 AM
githubUrlhttps://github.com/neomjs/neo/issues/10011
authortobiu
commentsCount1
parentIssue10016
subIssues[]
subIssuesCompleted0
subIssuesTotal0
blockedBy[x] 10000 Hardened Identity Ingestion & Tenant Isolation
blocking[]
closedAtMay 20, 2026, 9:50 AM

Native Edge Graph (SQLite): Row-Level Security & Tenant Isolation

Closed v13.0.0/archive-v13-0-0-chunk-4 enhancementaiarchitecture
tobiu
tobiu commented on Apr 14, 2026, 5:21 PM

Objective

Ensure the SQLite Native Edge Graph respects the same Multi-Tenant isolation rules as the ChromaDB vector store to prevent structural data leaks.

Tasks

  1. Execute a database migration (ALTER TABLE) on the nodes and edges SQLite tables to introduce a user_id column.
  2. Ensure structural ingestion tools (e.g., add_memory pushing Session Nodes, or mutate_frontier) stamp the acting config.auth.userId.
  3. Refactor graph search primitives (query_hybrid_graph, search_nodes, get_node) to strictly append WHERE user_id = ? OR visibility = 'team' to prevent Alice's context window from pulling in Bob's private session nodes that happen to be structurally adjacent.
tobiu added the enhancement label on Apr 14, 2026, 5:21 PM
tobiu added the ai label on Apr 14, 2026, 5:21 PM
tobiu added the architecture label on Apr 14, 2026, 5:21 PM
tobiu added parent issue #9999 on Apr 14, 2026, 5:22 PM
tobiu cross-referenced by #10016 on Apr 14, 2026, 6:43 PM
tobiu cross-referenced by #10017 on Apr 14, 2026, 6:43 PM
tobiu removed parent issue #9999 on Apr 14, 2026, 6:44 PM
tobiu added parent issue #10016 on Apr 14, 2026, 6:44 PM
tobiu marked this issue as being blocked by #10000 on Apr 14, 2026, 6:44 PM
tobiu cross-referenced by PR #10128 on Apr 20, 2026, 4:12 PM
tobiu cross-referenced by PR #10130 on Apr 20, 2026, 5:26 PM
tobiu referenced in commit 3bf7d95 - "feat(memory-core): graph RLS read-side return boundary (#10011) (#11672) on May 20, 2026, 9:50 AM
tobiu closed this issue on May 20, 2026, 9:50 AM
tobiu referenced in commit 09c69b2 - "feat(kb): add Phase 2E tenant config storage (#11637) (#11704) on May 21, 2026, 7:58 AM