  msolarczekandClaude Opus 5
|
6f3f5a5947
|
Fundament: Baseline-Migration mit RLS-Funktion
- 67 Certvia-Migrationen zu prisma/migrations/0001_baseline gesquasht
(prisma migrate diff --from-empty --to-schema)
- RLS-Block: Rolle craftvia_app (NOLOGIN NOBYPASSRLS, idempotent), GRANTs +
ALTER DEFAULT PRIVILEGES, wiederverwendbare Funktion enable_tenant_rls(tbl)
(ENABLE + Policy tenant_isolation USING/WITH CHECK + FORCE + GRANT),
angewendet auf alle Tenant-Tabellen (inkl. nullable tenant_id wie bisher)
- docs/craftvia/MIGRATIONS.md: Pflichten für neue Tenant-Tabellen
(enable_tenant_rls + beide TENANT_MODELS-Listen + PII-Felder)
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
|
2026-09-14 11:40:34 +02:00 |
|