2139. Multi-tenant: Ensure a tenant can only see its own orders. — Node.js + Express + mysql2

DBMS Published 30 Sept 2026 Updated 30 Sept 2026 0 Views Verified

In a multi-tenant module, solve this as a production problem using Node.js + Express + mysql2: Ensure a tenant can only see its own orders. Provide the SQL, explain the logic, show safe application integration, and mention failure/edge cases.

Looking for the latest Sarkari Result 2026 updates? Check the latest government exam results, merit lists and result updates on Sarkari Resultess.

Answer & Explanation

4 Answers

Verified

Option A

DELETE FROM table_name;

Additional Explanation

Incorrect: it does not satisfy the stated business rule and can return/change unintended data.

Verified Correct Answer

Option B

SELECT o.id,o.total_amount FROM orders o WHERE o.tenant_id=:tenant_id AND o.customer_id=:customer_id;

Additional Explanation

Tenant scoping belongs in every data-access path, ideally in centralized repository/scopes.

Verified

Option C

UPDATE table_name SET status='active';

Additional Explanation

Incorrect: it does not satisfy the stated business rule and can return/change unintended data.

Verified

Option D

SELECT * FROM table_name;

Additional Explanation

Incorrect: it does not satisfy the stated business rule and can return/change unintended data.