PocketBase Auth and Access (Advanced)
Overview
Use this only for deeper auth/rule design. Default to pocketbase-agent-orchestrator for standard operations.
Focus
- Auth flows (email/password, OAuth)
- Collection access rules (
list/view/create/update/delete) - Ownership and tenant membership checks
Minimal Workflow
- Define actor types and trust boundaries.
- Set least-privilege rules per collection operation.
- Verify unauthorized and cross-tenant failures.
- Align with API integration and incident checks.