One schema for data, tenancy, and permissions.

model User {
  id    BigInt @id
  name  String
  posts Post[]

  @@map("users")
}

model Post {
  id        BigInt  @id
  title     String
  author_id BigInt
  author    User    @relation(fields: [author_id], references: [id])
  embedding pgvector.Vector?

  @@map("posts")
}

let maya = client
    .create_user_from(NewUser { name: "Maya".to_owned() })
    .save()
    .await?;

let posts = client
    .post()
    .title_contains("typed")
    .with_author(|author| author)
    .order_by(post::Post::id.desc())
    .limit(20)
    .all()
    .await?;

let nearest = client
    .post()
    .nearest_cosine(post::Post::embedding, &query)
    .limit(5)
    .all()
    .await?;

access {
  subjects = [User]
}

permissions Post {
  editor = author or [User]
  viewer = editor or [User]

  read   = viewer
  create = anyone
  update = editor
  delete, manage_grants = author
}

let client = Client::connect(database_url).await?;

// Apply Maya's permissions to this client.
let maya = client.with_viewer(
    Viewer::of(User::subject(maya_id)),
);

// Maya invites Ken to edit one post.
maya.post_permissions(&post_id)
    .grant_editor(User::subject(ken_id))
    .save()
    .await?;

tenancy {
  scope = "required"
  field = "tenant_id"
}

model Post {
  id        BigInt @id
  tenant_id BigInt
  title     String
}

let client = Client::connect(database_url).await?;

// Bind the tenant from the verified request.
let acme = client
    .with_viewer(verified_viewer.tenant(acme_id));

// The generated query stays inside Acme.
let posts = acme.post().all().await?;