- 技术分享Database isolation in multi-tenant SaaS: converging cross-database risk with least privilegeIn a multi-tenant system, "who can touch which database" is the easiest permission surface to overlook. A full systemic convergence: risk taxonomy, permission matrix, tightening checklist, verifiable tests and independent review.
- 技术分享"Three concurrency traps in Odoo 20: snapshot idempotency, rate-limit upserts and serialization failures"Small things like duplicate-form protection and API rate limiting misbehave in surprising ways under PostgreSQL's repeatable-read transactions. Three concurrency problems in full — the wrong pattern, the root cause, the fix, and how to test it.
- 技术分享Field notes from a PostgreSQL major upgrade: fix the mount, then the dataAlmost all the work of a major database upgrade happens before the upgrade itself — image layouts move, environment variables come pre-baked, and a backup only counts once it restores. The full checklist order and three traps from a 16→18 upgrade.
- 技术分享How we rebuilt the Openstone website on Next.js 16 and Odoo 20Rebuilding openstone.cn from a legacy Odoo site into a bilingual Next.js 16 website — with a backend that does exactly one job: deliver enquiries into CRM, reliably. The trade-offs, the legacy-URL plan and the acceptance approach, in full.
