The native tenancy feature has met its tragic end in an excruciating 100-commit PR. Shoutout to the one guy at Apple who seems to be single-handedly cleaning up the FDB codebase. Honestly, I think it would be easier to rewrite the thing in a real programming language, but realistically what do I know.
I had long thought Apple actually used the tenant features, but I guess it was actually a Snowflake thing. Presumably they prefer to manage tenancy in the record layer. I do think the idea of having a sanity check for commits that cross tenant boundaries has merit, though the FDB implementation seemed excessive. They kept a tenant id => keyspace map on the CommitProxies and Storage servers and used it to validate the id directly. Perhaps just validating a shared subspace prefix would be enough.
The native tenancy was the closest thing FDB has ever had to actual access control, though, which is an interesting premise. RIP.
