Unveränderter Stand von certvia/dev (a48c5fb) plus Craftvia-Spezifikation und Brandbook unter docs/craftvia/. ISMS-Module werden im Folgecommit entfernt. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
28 lines
846 B
SQL
28 lines
846 B
SQL
-- CreateTable
|
|
CREATE TABLE "policy_package_states" (
|
|
"id" TEXT NOT NULL,
|
|
"tenant_id" TEXT NOT NULL,
|
|
"imported_version" TEXT,
|
|
"imported_at" TIMESTAMP(3),
|
|
"updated_at" TIMESTAMP(3) NOT NULL,
|
|
|
|
CONSTRAINT "policy_package_states_pkey" PRIMARY KEY ("id")
|
|
);
|
|
|
|
-- CreateIndex
|
|
CREATE UNIQUE INDEX "policy_package_states_tenant_id_key" ON "policy_package_states"("tenant_id");
|
|
|
|
-- CreateIndex
|
|
CREATE INDEX "policy_package_states_tenant_id_idx" ON "policy_package_states"("tenant_id");
|
|
|
|
|
|
-- RLS für die neue mandantenbezogene Tabelle.
|
|
DO $$
|
|
DECLARE t text;
|
|
BEGIN
|
|
FOREACH t IN ARRAY ARRAY['policy_package_states'] LOOP
|
|
EXECUTE format('ALTER TABLE %I ENABLE ROW LEVEL SECURITY', t);
|
|
EXECUTE format('CREATE POLICY tenant_isolation ON %I USING (tenant_id = current_setting(''app.tenant_id'', true))', t);
|
|
END LOOP;
|
|
END $$;
|