Behind the scenes: How we built Password Roles

This post details the implementation of granular password roles for PlanetScale databases. It explains how Vitess's static ACL configuration was adapted for a dynamic, customer-facing system. The solution involves storing user credentials and their mapped roles in an external database, which is then used to rewrite the security principal on-the-fly. This allows for immediate application of role changes and ensures consistent authorization state across all database pods, overcoming limitations of Vitess's static ACL file reloading mechanism.