Workspaces and isolation
Personal and organisation workspaces are strictly separated, and the separation is enforced at the database level rather than in the interface.
Who this is for: Anyone in more than one workspace, and anyone assessing Byteflare's data separation.
Switching workspace
Use the workspace switcher in the top navigation to move between Personal and each organisation you belong to. Your selection is stored in a cookie in that browser. It does not follow you to another device.
What each workspace can see
- A personal project belongs to you alone. No admin or owner of any organisation can open it.
- An organisation project is visible to every active member of that organisation, regardless of who created it.
- Templates follow the same rule.
- Trash follows the same rule, except that owners and admins additionally see other members' trashed projects.
Isolation between organisations
Membership of one organisation gives you nothing in another. The access rules are enforced by row-level security policies in the database and re-checked in application code, and the behaviour is covered by an automated isolation test suite. The specific guarantees that suite asserts are:
| Situation | Result |
|---|---|
| A member of organisation A requests a project belonging to organisation B by its exact id | Denied |
| A member with the member role tries to change organisation settings or manage members | Denied |
| A user with no organisation reads their own personal rows | Allowed |
| A user with no organisation requests any organisation row | Denied |
| A suspended member of an organisation requests that organisation's rows | Denied |
| An invited person who has not yet accepted requests the organisation's rows | Denied until the invite is accepted |
Related
- Roles and permissionsOwner, admin and member, and exactly which actions each one can take.
- Privacy, data and AIGenerating a scope sends your brief to a third-party model provider. This page explains exactly what leaves Byteflare and what is kept.
- Byteflare for EnterpriseAn Enterprise agreement covers everything in the Team plan, arranged under a contract that satisfies procurement, security review and finance.