16 lines
514 B
SQL
16 lines
514 B
SQL
-- Permite que client_editor inserte procesos en su propia org
|
|
-- Los demás roles mantienen sus permisos actuales
|
|
|
|
DROP POLICY IF EXISTS "insert_processes" ON public.processes;
|
|
|
|
CREATE POLICY "insert_processes" ON public.processes
|
|
FOR INSERT WITH CHECK (
|
|
public.is_platform_admin()
|
|
OR public.current_platform_role() = 'member'
|
|
OR (
|
|
public.current_platform_role() = 'client_editor'
|
|
AND org_id = public.current_org()
|
|
)
|
|
-- client_viewer y guest siguen sin poder crear procesos
|
|
);
|