-- CreateTable
CREATE TABLE "wizard_scopes" (
    "id" TEXT NOT NULL,
    "tenant_id" TEXT NOT NULL,
    "pruefziele" TEXT[] DEFAULT ARRAY['informationssicherheit']::TEXT[],
    "geltungsbereich" TEXT,
    "standorte" TEXT[] DEFAULT ARRAY[]::TEXT[],
    "ausschluesse" TEXT,
    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
    "updated_at" TIMESTAMP(3) NOT NULL,

    CONSTRAINT "wizard_scopes_pkey" PRIMARY KEY ("id")
);

-- CreateIndex
CREATE UNIQUE INDEX "wizard_scopes_tenant_id_key" ON "wizard_scopes"("tenant_id");

-- CreateIndex
CREATE INDEX "wizard_scopes_tenant_id_idx" ON "wizard_scopes"("tenant_id");


-- RLS für die neue mandantenbezogene Tabelle.
DO $$
DECLARE t text;
BEGIN
  FOREACH t IN ARRAY ARRAY['wizard_scopes'] LOOP
    EXECUTE format('ALTER TABLE %I ENABLE ROW LEVEL SECURITY', t);
    EXECUTE format('CREATE POLICY tenant_isolation ON %I USING (tenant_id = current_setting(''app.tenant_id'', true))', t);
  END LOOP;
END $$;