One of the most important parts of your database is making sure that only users who should have access to data actually do.

Because Devize lets you get data directly from pages or components, your data is essentially public to the internet, unless you assign security rules. Simply applying filters to your data when you load it, won't protect your data. Without security rules, a smart developer who knew what they were doing could still access the data in your app.

We've designed security rules to try and maximize how flexible they are, while also making sure your database remains fast and performant.