# Enduser Authentication - Restriction to sql Data

**URL:** <https://community.dreamfactory.com/t/enduser-authentication-restriction-to-sql-data/2073>\
**Category:** Authentication & Security\
**Created:** [January 22, 2016, 8:07am UTC](https://community.dreamfactory.com/t/enduser-authentication-restriction-to-sql-data/2073 "2016-01-22T08:07:29Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![lumoe](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/lumoe/32/573_2.png) [@lumoe](https://community.dreamfactory.com/u/lumoe)\
**Post date:** [January 22, 2016, 8:07am UTC](https://community.dreamfactory.com/t/enduser-authentication-restriction-to-sql-data/2073/1 "2016-01-22T08:07:29Z")

</div>

Hello,

i have a webservice running where it is possible for endusers to signup.  
If they login i want, that the authentication is done via my dreamfactory instance and the user is restricted to only his data.

Where has the user data to be saved?  
Do i really have to create a user for each authentication?  
But the biggest question is, how do i restrict them to their data? Server-Side scripting? Respectively do i need to do this or has my webservice to double check this? (In the future i want more services getting data from this interface)

Thank you in advance!

Lukas

---

<div class="post-metadata">

**Author:** ![Elvis\_Fernandes](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.dreamfactory.com/elvis_fernandes/32/429_2.png) [@Elvis\_Fernandes](https://community.dreamfactory.com/u/Elvis_Fernandes)\
**Post date:** [January 26, 2016, 6:39pm UTC](https://community.dreamfactory.com/t/enduser-authentication-restriction-to-sql-data/2073/2 "2016-01-26T18:39:51Z")

</div>

You’ll have to use Server Side Filters to have Record Level Access control.

When creating your database schema, create one field with type user\_id. This will be used to identify the owner of that record.

In the user’s role define an Advanced Filter to filter only the records owned by the user requesting the data.

Take a look at [https://github.com/dreamfactorysoftware/dsp-core/wiki/Server-Side-Filters](https://github.com/dreamfactorysoftware/dsp-core/wiki/Server-Side-Filters)