Are there any resources or community posts that explain how retool works and what code / queries are exposed to users? I'm trying to get a handle on what security consideration I should take into account when building an app. For example can an app user modify a sql query to change the input parame…

Hi @DavidS Thanks for sharing the links you found! For security purposes, I'd also recommend ensuring that you are using prepared statements (also linked in the Preventing query spoofing doc). This is on by default, and only admins can turn off prepared statements from the resource page. If you are…

Retool - how it works and security

💬 Queries and Resources

DavidS January 27, 2023, 12:16pm 3

And for reference more info on where queries are run in this post.

1 Like

Topic		Replies	Views
Using Retool to write directly in the db 💬 App Building	2	37	May 6, 2025
Is Retool intended for onboarding our users/customers? 💬 Queries and Resources	9	2314	August 2, 2023
Confused about SQL table permissions in Retool and how to restrict access to certain tables by user 💬 Queries and Resources	3	942	July 28, 2023
Security Consideration: Server Side Rendering vs Client Side Rendering 💬 Queries and Resources	4	2490	May 31, 2023
Safe communication with public app 💬 App Building	1	361	September 11, 2023

Retool - how it works and security

Related topics