Hi community,
we're trying to move our application from a graph-based user management over to the integrated role based one from the 4.1 enterprise. At the moment we have all users stored in one instance per tenant and therefore the management is secure for each of them as they only can see their own users.
But we couldn't setup a system with one neo4j instance and multiple databases as granting user management allows to see all other users because of the access to the dbms. We can of course filter them down within the application using a filter to the corresponding roles, but there's still the evil database access what chalks up our system as a vulnerable.
Has anybody else had to do with such a setup already and if so what was the final outcome? Would be great to hear from you.
Kindly,
Marc
