SIAX Agent
afd0b4ec46
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 5s
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / security (pull_request) Successful in 25s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 54s
CI (SIAX Cloud) / integration (pull_request) Successful in 1m11s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m1s
queryFacts använde String(Date) -> 'Sat Nov 07 2026 15:00:00 GMT+0000 (...)',
vilket L0RE:s canonical-projection avvisar ('must be RFC3339 date-time').
Inför iso()-helper: Date -> toISOString(), annars String(). Gäller
observed_at, valid_from, valid_to, created_at.
20 lines
768 B
SQL
20 lines
768 B
SQL
-- 023_canonical_grants.sql — app-role privileges for 022 canonical tables.
|
|
--
|
|
-- Tables created by a manual psql migration are owned by the migrating role
|
|
-- (0pt_edge); the running application connects as 0pt_app. Existing 0pt tables
|
|
-- carry explicit grants rather than default ACLs, so the canonical tables need
|
|
-- the same treatment. RLS still applies to 0pt_app (FORCE is on); this only
|
|
-- grants the statement privileges, not row visibility.
|
|
--
|
|
-- Idempotent and role-guarded: no-op in environments without the app role.
|
|
|
|
DO $$
|
|
BEGIN
|
|
IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = '0pt_app') THEN
|
|
GRANT SELECT, INSERT, UPDATE, DELETE
|
|
ON opt_canonical_entities, opt_canonical_facts, opt_canonical_relations
|
|
TO "0pt_app";
|
|
END IF;
|
|
END
|
|
$$;
|