feat(db): migración 018 — INSERT policy para client_editor en processes

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
2026-07-07 22:18:11 -03:00
parent 54306be1c2
commit 70d35dad8b

View File

@@ -0,0 +1,15 @@
-- Permite que client_editor inserte procesos en su propia org
-- Los demás roles mantienen sus permisos actuales
DROP POLICY IF EXISTS "insert_processes" ON public.processes;
CREATE POLICY "insert_processes" ON public.processes
FOR INSERT WITH CHECK (
public.is_platform_admin()
OR public.current_platform_role() = 'member'
OR (
public.current_platform_role() = 'client_editor'
AND org_id = public.current_org()
)
-- client_viewer y guest siguen sin poder crear procesos
);