#multi-tenancy

Laravel per-tenant job limits compared: RateLimited with default tries failed 240 of 300 jobs while delay at dispatch failed none

Laravel's RateLimited job middleware failed 240 of 300 jobs

Laravel's RateLimited job middleware protected a small tenant from a noisy one, and it also failed 240 of the noisy tenant's 300 jobs. In my lab, a limit of 20 jobs per second kept the small tenant's

Sat Oct 24 2026 · 9 min read · 0 views

Software

Laravel tenant isolation compared: a global scope exposes 200,000 rows while Postgres Row Level Security exposes the tenant's 2,000

Laravel tenant scopes leaked in 5 of 7 paths. RLS closed all of them

Laravel tenant scopes built on a tenantid global scope do not isolate tenants. In a lab with 200,000 invoice rows across 100 tenants, the scope leaked all 200,000 rows in 5 of 7 common query paths.

Sat Oct 24 2026 · 10 min read · 0 views

Software