msolarczekandClaude Opus 5
c8e6f30a27
Unveränderter Stand von certvia/dev (a48c5fb) plus Craftvia-Spezifikation und Brandbook unter docs/craftvia/. ISMS-Module werden im Folgecommit entfernt. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
19 lines
916 B
SQL
19 lines
916 B
SQL
-- RLS-Policies für die Assets-&-BIA-Tabellen (analog zur Migration row_level_security)
|
|
|
|
ALTER TABLE "assets" ENABLE ROW LEVEL SECURITY;
|
|
ALTER TABLE "asset_relations" ENABLE ROW LEVEL SECURITY;
|
|
ALTER TABLE "processes" ENABLE ROW LEVEL SECURITY;
|
|
ALTER TABLE "process_assets" ENABLE ROW LEVEL SECURITY;
|
|
ALTER TABLE "bia_entries" ENABLE ROW LEVEL SECURITY;
|
|
|
|
CREATE POLICY tenant_isolation ON "assets"
|
|
USING ("tenant_id" = current_setting('app.tenant_id', true));
|
|
CREATE POLICY tenant_isolation ON "asset_relations"
|
|
USING ("tenant_id" = current_setting('app.tenant_id', true));
|
|
CREATE POLICY tenant_isolation ON "processes"
|
|
USING ("tenant_id" = current_setting('app.tenant_id', true));
|
|
CREATE POLICY tenant_isolation ON "process_assets"
|
|
USING ("tenant_id" = current_setting('app.tenant_id', true));
|
|
CREATE POLICY tenant_isolation ON "bia_entries"
|
|
USING ("tenant_id" = current_setting('app.tenant_id', true));
|