Advice on Users/Roles strategy for complex multi-tenant app

I’d try one of these:

  • create a role per family;
  • add beforeFind, beforeSave, beforeDelete triggers to the Member class which automatically add the constraints;
  • disable all operations on Member class via CLP and create cloud code functions for CRUD operations on this class which implement the constraints.