Rails Security + Multi-Tenancy

Use for security-sensitive Rails work and tenant-boundary reviews. Patterns from Fizzy (path-based multi-tenant SaaS) and Campfire (single-tenant, bot APIs).

Core Rules

• Scope all tenant data access through tenant/user ownership boundaries.
• Never trust naked Model.find(params[:id]) in tenant-aware flows.
• Scope realtime broadcasts and stream names by tenant/account.
• Rate-limit auth and abuse-prone endpoints.
• Treat user-provided URLs as untrusted input.
• Fail closed (head :forbidden) when access cannot be proven.

Tenancy Architecture (path-based, Fizzy-style)