Re: Restrict users to individual records

[Rick James]

Probably best to give each client his own database. And give each user his own login that is restricted to that database.

Alternatively, you could not give them access directly to the database. Instead, have a layer of code that they have to go through. In that, you would control logins and access, and limit what they can do with the data.

If they are currently doing arbitrary queries, the layer would be a set-back for them. But, ad hoc queries are a serious threat to the integrity of the system.