Isolated tenant workspaces

Every tenant works inside their own copy of FS Poster. Their channels, schedules, labels, media and settings are theirs alone; no tenant can see, list or reach the data of another, even though all of them run on one WordPress installation.

What is isolated

• Channels and channel sessions, schedules, labels and channel permissions.
• AI templates, AI logs, content ideas and notifications.
• Media uploads, which carry a tenant marker, get random file names and are excluded from other tenants' library, search and schedule pickers.
• Settings: AI, watermark and general social settings are stored per tenant, while licence, cron and system settings stay global and out of reach.

How it works

A tenant identifier is added to eleven core tables and a global query scope stamps it on every insert and filters it on every read. A request that carries no tenant matches nothing, so a bug in a screen cannot leak rows by accident. Scheduled publishing runs under a system mode and switches to each tenant in turn, checking that the tenant's plan still allows the network before a post goes out.

Tenants are confined to their dashboard: the rest of wp-admin, the workflows, planners, import and export, logger and licensing screens are denied. They can change only their own WordPress user and cannot add social apps of their own.

Included in every FS Poster SaaS licence: Starter, Ultimate and Infinity.