feat(db): migración 018 — INSERT policy para client_editor en processes
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
15
supabase/migrations/018_client_editor_insert.sql
Normal file
15
supabase/migrations/018_client_editor_insert.sql
Normal file
@@ -0,0 +1,15 @@
|
|||||||
|
-- Permite que client_editor inserte procesos en su propia org
|
||||||
|
-- Los demás roles mantienen sus permisos actuales
|
||||||
|
|
||||||
|
DROP POLICY IF EXISTS "insert_processes" ON public.processes;
|
||||||
|
|
||||||
|
CREATE POLICY "insert_processes" ON public.processes
|
||||||
|
FOR INSERT WITH CHECK (
|
||||||
|
public.is_platform_admin()
|
||||||
|
OR public.current_platform_role() = 'member'
|
||||||
|
OR (
|
||||||
|
public.current_platform_role() = 'client_editor'
|
||||||
|
AND org_id = public.current_org()
|
||||||
|
)
|
||||||
|
-- client_viewer y guest siguen sin poder crear procesos
|
||||||
|
);
|
||||||
Reference in New Issue
Block a user