I have created an App for bidding.this is for public purposes
Some of tables are like below:
1-Users:including clients and users within two type of roles
2-Projects :Clients add their projects and other users will cilck on every project for offer a price
3-Offer List: It is sent to this table after the client accepts one of the offers
Offer list table is secure because I have client and offer winner email and two columns are made “Row Owner”, but
For Projects table I can’t make row owner because I have only clients email.if I make this column row owner.two type roles user will not see the projects.
For Users table also i can’t make row owner because clients and winner must see each other contact information.
In this case the project and user tables are not secure for public app
i appreciate you for helping
Would you ever want to have Row Owners in the Projects table? I’m guessing that anything in the projects table would always need to be public so anybody can make an offer on the project.
This makes sense, but where do you put all the open offers until one is accepted? From here on out, I’m just going to assume there is an Offers table in between the Projects table and Offer List table.
I think I would go ahead and secure the user table with row owners, and write any contact information into the other tables as needed. For example, when an offer is made on a project, the contact information for the person making the offer is written to the offer table, along with their email and the client email, so you can apply row owners in that Offers table.
When the client accepts an offer, a row is added to the Offer List table, passing along contact information from the offerer, contact information for the client, and emails for both.
Thank you very much I’ll try it 