Feature: Prevent any unauthorised user/session from running any query about surrealdb

[tobiemh]

Hey @Jayuda thanks so much for this issue submission 👍. We've actually been discussing this on the SurrealDB Discord.

The database currently allows connecting and querying from unauthenticated users (albeit they won't be able to see data which has not been allowed using PERMISSIONS).

We're thinking about adding in functionality to only allow requests from AUTHENTICATED user sessions, and to deny UNAUTHENTICATED sessions. This means a developer/user of SurrealDB would. be able to completely disallow any unauthenticated session from running any query (even those that don't actually query table data, like the example you gave).

[Jayuda]

thanks for responding to this issue. hopefully it can be added soon so that surrealdb can be more stable and secure.

[tobiemh]

It is now possible to completely deny access to anonymous and unauthenticated users with #2547, and in addition it's now possible to set the function and query capabilities of a SurrealDB instance with #2489 🚀 🎉 😃 !