npm - @flowselections/floriday-voorraad - Versions diffs - 1.0.97 → 1.0.101 - Mend

@flowselections/floriday-voorraad 1.0.97 → 1.0.101

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/dist-lib/integrations/supabase/types.d.ts +1063 -10
package/dist-lib/integrations/supabase/types.d.ts.map +1 -1
package/package.json +2 -2
package/sql/AGENTS.md +1 -0
package/sql/floriday-voorraad-schema.sql +856 -341

package/sql/floriday-voorraad-schema.sql CHANGED Viewed

@@ -1,4 +1,4 @@
--- @flowselections/floriday-voorraad 1.0.95 – volledig schema (idempotent, geen gegevens).
+-- @flowselections/floriday-voorraad 1.0.100 – volledig schema (idempotent, geen gegevens).
 -- Gegenereerd uit de database met scripts/generate-voorraad-schema.py. Niet met de hand wijzigen.
 -- Volgorde 20. Ontbrekende tabellen van andere modules worden overgeslagen met een NOTICE; draai opnieuw na die module.
 -- De statuscontrole van floriday_continuous_stock_queue is van Voorraad en wordt hier opnieuw gemaakt.
@@ -502,6 +502,16 @@ ALTER TABLE public.voorraad_buffer_state ADD COLUMN IF NOT EXISTS detached_order
 ALTER TABLE public.voorraad_buffer_state ADD COLUMN IF NOT EXISTS created_at timestamp with time zone DEFAULT now() NOT NULL;
 ALTER TABLE public.voorraad_buffer_state ADD COLUMN IF NOT EXISTS updated_at timestamp with time zone DEFAULT now() NOT NULL;
+-- voorraad_correcties
+CREATE TABLE IF NOT EXISTS public.voorraad_correcties ();
+ALTER TABLE public.voorraad_correcties ADD COLUMN IF NOT EXISTS id uuid DEFAULT gen_random_uuid() NOT NULL;
+ALTER TABLE public.voorraad_correcties ADD COLUMN IF NOT EXISTS correctie text NOT NULL;
+ALTER TABLE public.voorraad_correcties ADD COLUMN IF NOT EXISTS uitgevoerd_op timestamp with time zone DEFAULT now() NOT NULL;
+ALTER TABLE public.voorraad_correcties ADD COLUMN IF NOT EXISTS uitgevoerd_door text NOT NULL;
+ALTER TABLE public.voorraad_correcties ADD COLUMN IF NOT EXISTS proef boolean NOT NULL;
+ALTER TABLE public.voorraad_correcties ADD COLUMN IF NOT EXISTS aantallen jsonb DEFAULT '{}'::jsonb NOT NULL;
+ALTER TABLE public.voorraad_correcties ADD COLUMN IF NOT EXISTS hash_ok boolean;
 -- voorraad_custom_fields
 CREATE TABLE IF NOT EXISTS public.voorraad_custom_fields ();
 ALTER TABLE public.voorraad_custom_fields ADD COLUMN IF NOT EXISTS id uuid DEFAULT gen_random_uuid() NOT NULL;
@@ -622,6 +632,7 @@ CREATE OR REPLACE FUNCTION public._floriday_queue_cleanup_batch(p_statuses text[
 AS $function$
 DECLARE v_n integer;
 BEGIN
+  PERFORM public.voorraad_vereis('server', '_floriday_queue_cleanup_batch');
   WITH victims AS (
     SELECT q.id FROM public.floriday_continuous_stock_queue q
      WHERE q.status = ANY(p_statuses)
@@ -641,12 +652,15 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION _floriday_queue_cleanup_batch(text[],integer,boolean,integer) FROM PUBLIC;
+REVOKE ALL ON FUNCTION _floriday_queue_cleanup_batch(text[],integer,boolean,integer) FROM anon;
 GRANT EXECUTE ON FUNCTION _floriday_queue_cleanup_batch(text[],integer,boolean,integer) TO service_role;
 CREATE OR REPLACE FUNCTION public._migrate_rewrite_stock_key(_from_key text, _to_key text)
  RETURNS void
  LANGUAGE plpgsql
+ SET search_path TO 'public'
 AS $function$
-BEGIN
+BEGIN
+  PERFORM public.voorraad_vereis('server', '_migrate_rewrite_stock_key');
   IF _from_key = _to_key THEN RETURN; END IF;
   -- Voor rijen die botsen: som fysiek/reserved/incoming in de target, kies max voor minimum
@@ -682,8 +696,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION _migrate_rewrite_stock_key(text,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION _migrate_rewrite_stock_key(text,text) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION _migrate_rewrite_stock_key(text,text) TO anon;
+REVOKE ALL ON FUNCTION _migrate_rewrite_stock_key(text,text) FROM anon;
+REVOKE EXECUTE ON FUNCTION _migrate_rewrite_stock_key(text,text) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION _migrate_rewrite_stock_key(text,text) TO authenticated;
+GRANT EXECUTE ON FUNCTION _migrate_rewrite_stock_key(text,text) TO service_role;
+REVOKE EXECUTE ON FUNCTION _migrate_rewrite_stock_key(text,text) FROM anon;
 GRANT EXECUTE ON FUNCTION _migrate_rewrite_stock_key(text,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION _migrate_rewrite_stock_key(text,text) TO service_role;
 CREATE OR REPLACE FUNCTION public._stock_import_caller(p_owner uuid)
@@ -696,6 +713,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION _stock_import_caller(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION _stock_import_caller(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION _stock_import_caller(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.apply_fust_stock_mutation()
  RETURNS trigger
@@ -713,8 +731,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION apply_fust_stock_mutation() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION apply_fust_stock_mutation() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION apply_fust_stock_mutation() TO anon;
+REVOKE ALL ON FUNCTION apply_fust_stock_mutation() FROM anon;
+REVOKE EXECUTE ON FUNCTION apply_fust_stock_mutation() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION apply_fust_stock_mutation() TO authenticated;
+GRANT EXECUTE ON FUNCTION apply_fust_stock_mutation() TO service_role;
+REVOKE EXECUTE ON FUNCTION apply_fust_stock_mutation() FROM anon;
 GRANT EXECUTE ON FUNCTION apply_fust_stock_mutation() TO authenticated;
 GRANT EXECUTE ON FUNCTION apply_fust_stock_mutation() TO service_role;
 CREATE OR REPLACE FUNCTION public.apply_stock_consumption(p_trade_item_key text, p_qty numeric, p_order_id uuid, p_order_item_id uuid, p_source text, p_reason text)
@@ -728,6 +749,7 @@ DECLARE
   v_src text := CASE WHEN v_norm = 'FO' THEN 'FLORIDAY_ORDER' ELSE 'ORDER_DELIVERY' END;
   v_ctx record; v_key text; r public.trade_item_stock%ROWTYPE; v_after numeric; v_res_after numeric;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'apply_stock_consumption');
   IF p_trade_item_key IS NULL OR COALESCE(p_qty,0) <= 0 THEN RETURN; END IF;
   SELECT * INTO v_ctx FROM public.get_active_floriday_context();
   v_key := public.ensure_trade_item_stock_row_key(p_trade_item_key);
@@ -774,8 +796,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) TO anon;
+REVOKE ALL ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) FROM anon;
+REVOKE EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) TO authenticated;
+GRANT EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) TO service_role;
+REVOKE EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) FROM anon;
 GRANT EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION apply_stock_consumption(text,numeric,uuid,uuid,text,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.apply_stock_reservation(p_trade_item_key text, p_qty numeric, p_order_id uuid, p_order_item_id uuid, p_source text, p_reason text)
@@ -789,6 +814,7 @@ DECLARE
   v_src text := public.normalize_order_source(p_source);
   v_found boolean := false;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'apply_stock_reservation');
   IF p_qty = 0 THEN RETURN; END IF;
   IF p_trade_item_key IS NULL THEN
     INSERT INTO public.stock_mutation_log(trade_item_key, order_id, order_item_id, order_source, mutation_type, qty_delta, reason, created_by)
@@ -814,8 +840,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) TO anon;
+REVOKE ALL ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) FROM anon;
+REVOKE EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) TO authenticated;
+GRANT EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) TO service_role;
+REVOKE EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) FROM anon;
 GRANT EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION apply_stock_reservation(text,numeric,uuid,uuid,text,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.autolink_product_to_floriday(p_product_id uuid)
@@ -826,6 +855,7 @@ CREATE OR REPLACE FUNCTION public.autolink_product_to_floriday(p_product_id uuid
 AS $function$
 DECLARE v_row RECORD; v_new_key text; v_old_key text; v_floriday_id text;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'autolink_product_to_floriday');
   SELECT id, product, barcode, trade_item_key, floriday_trade_item_id INTO v_row
     FROM public.products WHERE id = p_product_id;
   IF NOT FOUND THEN RETURN NULL; END IF;
@@ -870,8 +900,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION autolink_product_to_floriday(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) TO anon;
+REVOKE ALL ON FUNCTION autolink_product_to_floriday(uuid) FROM anon;
+REVOKE EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) TO authenticated;
+GRANT EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) TO service_role;
+REVOKE EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION autolink_product_to_floriday(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.backfill_open_order_reservations()
@@ -885,6 +918,7 @@ DECLARE
   v_key text;
   n int := 0;
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'backfill_open_order_reservations');
   FOR r IN
     SELECT oi.id AS oi_id, oi.order_id, oi.product_id, oi.quantity,
            COALESCE(o.order_source,'manual') AS src
@@ -903,8 +937,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION backfill_open_order_reservations() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION backfill_open_order_reservations() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION backfill_open_order_reservations() TO anon;
+REVOKE ALL ON FUNCTION backfill_open_order_reservations() FROM anon;
+REVOKE EXECUTE ON FUNCTION backfill_open_order_reservations() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION backfill_open_order_reservations() TO authenticated;
+GRANT EXECUTE ON FUNCTION backfill_open_order_reservations() TO service_role;
+REVOKE EXECUTE ON FUNCTION backfill_open_order_reservations() FROM anon;
 GRANT EXECUTE ON FUNCTION backfill_open_order_reservations() TO authenticated;
 GRANT EXECUTE ON FUNCTION backfill_open_order_reservations() TO service_role;
 CREATE OR REPLACE FUNCTION public.calculate_floriday_desired_stock(p_connection_id uuid, p_product_id uuid)
@@ -917,6 +954,7 @@ DECLARE
   s public.floriday_inventory_settings%ROWTYPE;
   v_pack integer; v_calc jsonb; v_type text; v_avail integer := 0; v_raw integer; v_reason text;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'calculate_floriday_desired_stock');
   SELECT * INTO s FROM public.floriday_inventory_settings
    WHERE connection_id = p_connection_id AND product_id = p_product_id;
   stock_mode := COALESCE(s.stock_mode, 'FOLLOW_ERP');
@@ -960,6 +998,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION calculate_floriday_desired_stock(uuid,uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION calculate_floriday_desired_stock(uuid,uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION calculate_floriday_desired_stock(uuid,uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.calculate_structure_available(p_connection_id uuid, p_product_id uuid, p_level integer DEFAULT 0, p_path uuid[] DEFAULT '{}'::uuid[])
  RETURNS jsonb
@@ -972,6 +1011,7 @@ DECLARE
   v_sum integer := 0; v_min integer; v_limit uuid; v_reason text; v_info text;
   v_parts jsonb := '[]'; v_member uuid; v_qty numeric; v_possible integer; v_path uuid[];
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'calculate_structure_available');
   IF p_product_id = ANY(p_path) THEN
     RETURN jsonb_build_object('type','UNKNOWN','available',0,'reason','CYCLE',
       'path', to_jsonb(p_path || p_product_id));
@@ -1066,6 +1106,7 @@ EXCEPTION WHEN others THEN
 END $function$
 ;
 REVOKE ALL ON FUNCTION calculate_structure_available(uuid,uuid,integer,uuid[]) FROM PUBLIC;
+REVOKE ALL ON FUNCTION calculate_structure_available(uuid,uuid,integer,uuid[]) FROM anon;
 GRANT EXECUTE ON FUNCTION calculate_structure_available(uuid,uuid,integer,uuid[]) TO service_role;
 CREATE OR REPLACE FUNCTION public.canonicalize_trade_item_stock_key()
  RETURNS trigger
@@ -1137,8 +1178,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION canonicalize_trade_item_stock_key() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION canonicalize_trade_item_stock_key() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION canonicalize_trade_item_stock_key() TO anon;
+REVOKE ALL ON FUNCTION canonicalize_trade_item_stock_key() FROM anon;
+REVOKE EXECUTE ON FUNCTION canonicalize_trade_item_stock_key() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION canonicalize_trade_item_stock_key() TO authenticated;
+GRANT EXECUTE ON FUNCTION canonicalize_trade_item_stock_key() TO service_role;
+REVOKE EXECUTE ON FUNCTION canonicalize_trade_item_stock_key() FROM anon;
 GRANT EXECUTE ON FUNCTION canonicalize_trade_item_stock_key() TO authenticated;
 GRANT EXECUTE ON FUNCTION canonicalize_trade_item_stock_key() TO service_role;
 CREATE OR REPLACE FUNCTION public.check_product_structure(p_kind text, p_parent uuid, p_child uuid, p_name text DEFAULT NULL::text)
@@ -1149,6 +1193,7 @@ CREATE OR REPLACE FUNCTION public.check_product_structure(p_kind text, p_parent
 AS $function$
 DECLARE v_head uuid; v_other uuid; v_path uuid[]; v_depth integer; v_max integer := public.product_structure_max_depth();
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'check_product_structure');
   ok := true; code := NULL; message := NULL;
   IF p_kind = 'group_member' THEN
     SELECT COALESCE(g.head_product_id, public.product_id_from_ref(g.head_trade_item_floriday_id)) INTO v_head
@@ -1231,6 +1276,7 @@ EXCEPTION WHEN others THEN
 END $function$
 ;
 REVOKE ALL ON FUNCTION check_product_structure(text,uuid,uuid,text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION check_product_structure(text,uuid,uuid,text) FROM anon;
 GRANT EXECUTE ON FUNCTION check_product_structure(text,uuid,uuid,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION check_product_structure(text,uuid,uuid,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.claim_floriday_base_supply(p_worker text DEFAULT 'voorraad-base-supply'::text)
@@ -1241,6 +1287,7 @@ CREATE OR REPLACE FUNCTION public.claim_floriday_base_supply(p_worker text DEFAU
 AS $function$
 DECLARE l record;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'claim_floriday_base_supply');
   SELECT * INTO l FROM public.inventory_recompute_limits WHERE inventory_recompute_limits.id;
   -- Time-out: blijven hangen aanmaken gaat terug naar wachtend
   UPDATE public.floriday_continuous_stock_queue q
@@ -1273,6 +1320,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION claim_floriday_base_supply(text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION claim_floriday_base_supply(text) FROM anon;
 GRANT EXECUTE ON FUNCTION claim_floriday_base_supply(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.claim_floriday_stock_queue(p_limit integer DEFAULT 25, p_worker text DEFAULT 'auth-module'::text)
  RETURNS SETOF floriday_continuous_stock_queue
@@ -1281,6 +1329,7 @@ CREATE OR REPLACE FUNCTION public.claim_floriday_stock_queue(p_limit integer DEF
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'claim_floriday_stock_queue');
   RETURN QUERY
   WITH candidates AS (
     SELECT q.id
@@ -1306,50 +1355,13 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION claim_floriday_stock_queue(integer,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) TO anon;
+REVOKE ALL ON FUNCTION claim_floriday_stock_queue(integer,text) FROM anon;
+REVOKE EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) TO authenticated;
+GRANT EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) TO service_role;
+REVOKE EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) FROM anon;
 GRANT EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION claim_floriday_stock_queue(integer,text) TO service_role;
-CREATE OR REPLACE FUNCTION public.claim_logistics_tasks(_owner_module text, _task_type text, _worker text, _limit integer DEFAULT 25, _stale_minutes integer DEFAULT 5)
- RETURNS SETOF logistics_tasks
- LANGUAGE plpgsql
- SECURITY DEFINER
- SET search_path TO 'public'
-AS $function$
-BEGIN
-  RETURN QUERY
-  WITH candidates AS (
-    SELECT t.id
-    FROM public.logistics_tasks t
-    WHERE t.owner_module = _owner_module
-      AND t.task_type = _task_type
-      AND (
-        (t.status IN ('planned', 'claimed')
-          AND (t.next_attempt_at IS NULL OR t.next_attempt_at <= now()))
-        OR (t.status = 'in_progress'
-          AND t.claimed_at IS NOT NULL
-          AND t.claimed_at < now() - make_interval(mins => _stale_minutes))
-      )
-    ORDER BY t.priority DESC, t.planned_start NULLS FIRST, t.created_at
-    LIMIT GREATEST(_limit, 0)
-    FOR UPDATE SKIP LOCKED
-  )
-  UPDATE public.logistics_tasks t
-  SET status = 'in_progress',
-      claimed_by = _worker,
-      claimed_at = now(),
-      started_at = COALESCE(t.started_at, now()),
-      updated_at = now()
-  FROM candidates c
-  WHERE t.id = c.id
-  RETURNING t.*;
-END;
-$function$
-;
-REVOKE ALL ON FUNCTION claim_logistics_tasks(text,text,text,integer,integer) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION claim_logistics_tasks(text,text,text,integer,integer) TO anon;
-GRANT EXECUTE ON FUNCTION claim_logistics_tasks(text,text,text,integer,integer) TO authenticated;
-GRANT EXECUTE ON FUNCTION claim_logistics_tasks(text,text,text,integer,integer) TO service_role;
 CREATE OR REPLACE FUNCTION public.cleanup_floriday_stock_queue()
  RETURNS void
  LANGUAGE sql
@@ -1362,8 +1374,11 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION cleanup_floriday_stock_queue() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION cleanup_floriday_stock_queue() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION cleanup_floriday_stock_queue() TO anon;
+REVOKE ALL ON FUNCTION cleanup_floriday_stock_queue() FROM anon;
+REVOKE EXECUTE ON FUNCTION cleanup_floriday_stock_queue() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION cleanup_floriday_stock_queue() TO authenticated;
+GRANT EXECUTE ON FUNCTION cleanup_floriday_stock_queue() TO service_role;
+REVOKE EXECUTE ON FUNCTION cleanup_floriday_stock_queue() FROM anon;
 GRANT EXECUTE ON FUNCTION cleanup_floriday_stock_queue() TO authenticated;
 GRANT EXECUTE ON FUNCTION cleanup_floriday_stock_queue() TO service_role;
 CREATE OR REPLACE FUNCTION public.cleanup_voorraad_module_history()
@@ -1373,6 +1388,7 @@ CREATE OR REPLACE FUNCTION public.cleanup_voorraad_module_history()
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'cleanup_voorraad_module_history');
   DELETE FROM public.logistics_tasks
    WHERE status IN ('done', 'skipped', 'cancelled', 'failed')
      AND COALESCE(completed_at, updated_at) < now() - interval '90 days';
@@ -1384,6 +1400,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION cleanup_voorraad_module_history() FROM PUBLIC;
+REVOKE ALL ON FUNCTION cleanup_voorraad_module_history() FROM anon;
 GRANT EXECUTE ON FUNCTION cleanup_voorraad_module_history() TO service_role;
 CREATE OR REPLACE FUNCTION public.complete_floriday_base_supply(p_id uuid, p_kind text, p_label text DEFAULT NULL::text, p_error text DEFAULT NULL::text, p_attempt_id text DEFAULT NULL::text, p_outcome text DEFAULT NULL::text, p_price_status text DEFAULT NULL::text, p_price numeric DEFAULT NULL::numeric)
  RETURNS text
@@ -1393,6 +1410,7 @@ CREATE OR REPLACE FUNCTION public.complete_floriday_base_supply(p_id uuid, p_kin
 AS $function$
 DECLARE l record; v_row public.floriday_continuous_stock_queue%ROWTYPE; v_steps int[]; v_wait int; v_since timestamptz;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'complete_floriday_base_supply');
   SELECT * INTO v_row FROM public.floriday_continuous_stock_queue WHERE id = p_id;
   IF v_row.id IS NULL THEN RETURN 'missing'; END IF;
   SELECT * INTO l FROM public.inventory_recompute_limits WHERE inventory_recompute_limits.id;
@@ -1455,6 +1473,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION complete_floriday_base_supply(uuid,text,text,text,text,text,text,numeric) FROM PUBLIC;
+REVOKE ALL ON FUNCTION complete_floriday_base_supply(uuid,text,text,text,text,text,text,numeric) FROM anon;
 GRANT EXECUTE ON FUNCTION complete_floriday_base_supply(uuid,text,text,text,text,text,text,numeric) TO service_role;
 CREATE OR REPLACE FUNCTION public.complete_floriday_stock_queue(p_id uuid, p_ok boolean, p_error text DEFAULT NULL::text, p_permanent boolean DEFAULT false, p_attempt_id text DEFAULT NULL::text)
  RETURNS void
@@ -1473,6 +1492,7 @@ DECLARE
   v_since timestamptz;
   v_min integer;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'complete_floriday_stock_queue');
   SELECT * INTO v_row FROM public.floriday_continuous_stock_queue WHERE id = p_id;
   IF v_row.id IS NULL THEN RETURN; END IF;
   v_attempts := COALESCE(v_row.attempts, 0) + 1;
@@ -1560,8 +1580,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) TO anon;
+REVOKE ALL ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) FROM anon;
+REVOKE EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) TO authenticated;
+GRANT EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) TO service_role;
+REVOKE EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) FROM anon;
 GRANT EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION complete_floriday_stock_queue(uuid,boolean,text,boolean,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.complete_floriday_stock_queue_outcome(p_id uuid, p_outcome text, p_availability_sent boolean DEFAULT false, p_quantity_sent boolean DEFAULT false, p_error text DEFAULT NULL::text, p_attempt_id text DEFAULT NULL::text, p_permanent boolean DEFAULT false)
@@ -1572,6 +1595,7 @@ CREATE OR REPLACE FUNCTION public.complete_floriday_stock_queue_outcome(p_id uui
 AS $function$
 DECLARE v_row public.floriday_continuous_stock_queue%ROWTYPE; v_reason text; v_outcome text := p_outcome; v_err text := p_error;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'complete_floriday_stock_queue_outcome');
   SELECT * INTO v_row FROM public.floriday_continuous_stock_queue WHERE id = p_id;
   IF v_row.id IS NULL THEN RETURN; END IF;
@@ -1688,6 +1712,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION complete_floriday_stock_queue_outcome(uuid,text,boolean,boolean,text,text,boolean) FROM PUBLIC;
+REVOKE ALL ON FUNCTION complete_floriday_stock_queue_outcome(uuid,text,boolean,boolean,text,text,boolean) FROM anon;
 GRANT EXECUTE ON FUNCTION complete_floriday_stock_queue_outcome(uuid,text,boolean,boolean,text,text,boolean) TO service_role;
 CREATE OR REPLACE FUNCTION public.consume_bom_for_production(p_parent_kind text, p_parent_id text, p_parent_key text, p_quantity numeric, p_connection_id uuid, p_user_id uuid)
  RETURNS jsonb
@@ -1716,7 +1741,8 @@ DECLARE
   v_component_product_id uuid;
   v_stock_row record;
   v_connection_id uuid := p_connection_id;
-BEGIN
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'consume_bom_for_production');
   IF p_quantity IS NULL OR p_quantity <= 0 THEN
     RETURN jsonb_build_object('ok', true, 'consumed', '[]'::jsonb);
   END IF;
@@ -1941,6 +1967,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION consume_bom_for_production(text,text,text,numeric,uuid,uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION consume_bom_for_production(text,text,text,numeric,uuid,uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION consume_bom_for_production(text,text,text,numeric,uuid,uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.consume_bom_for_production(p_parent_kind text, p_parent_id text, p_parent_key text, p_quantity numeric, p_connection_id uuid, p_user_id uuid, p_batch_id uuid DEFAULT NULL::uuid)
  RETURNS jsonb
@@ -1970,7 +1997,8 @@ DECLARE
   v_stock_row record;
   v_connection_id uuid := p_connection_id;
   v_batch_id uuid := COALESCE(p_batch_id, gen_random_uuid());
-BEGIN
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'consume_bom_for_production');
   IF p_quantity IS NULL OR p_quantity <= 0 THEN
     RETURN jsonb_build_object('ok', true, 'consumed', '[]'::jsonb, 'batch_id', v_batch_id);
   END IF;
@@ -2150,6 +2178,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION consume_bom_for_production(text,text,text,numeric,uuid,uuid,uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION consume_bom_for_production(text,text,text,numeric,uuid,uuid,uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION consume_bom_for_production(text,text,text,numeric,uuid,uuid,uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.consume_order_item(p_order_id uuid, p_order_item_id uuid, p_source text, p_reason text)
  RETURNS integer
@@ -2159,6 +2188,7 @@ CREATE OR REPLACE FUNCTION public.consume_order_item(p_order_id uuid, p_order_it
 AS $function$
 DECLARE a record; n integer := 0; v_ins integer; v_norm text := public.normalize_order_source(p_source);
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'consume_order_item');
   IF p_order_item_id IS NULL THEN RETURN 0; END IF;
   IF EXISTS (SELECT 1 FROM public.stock_mutation_log WHERE order_item_id = p_order_item_id AND mutation_type = 'consumption')
      AND NOT EXISTS (SELECT 1 FROM public.stock_mutation_log WHERE order_item_id = p_order_item_id AND mutation_type = 'consumption_done') THEN
@@ -2193,6 +2223,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION consume_order_item(uuid,uuid,text,text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION consume_order_item(uuid,uuid,text,text) FROM anon;
 GRANT EXECUTE ON FUNCTION consume_order_item(uuid,uuid,text,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.drain_inventory_recompute_queue()
  RETURNS integer
@@ -2202,6 +2233,7 @@ CREATE OR REPLACE FUNCTION public.drain_inventory_recompute_queue()
 AS $function$
 DECLARE n integer := 0; v_batch int;
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'drain_inventory_recompute_queue');
   SELECT drain_batch INTO v_batch FROM public.inventory_recompute_limits WHERE id;
   PERFORM set_config('inventory.inline_overflow', '0', true);
   n := public.process_inventory_recompute_queue(COALESCE(v_batch, 500));
@@ -2213,6 +2245,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION drain_inventory_recompute_queue() FROM PUBLIC;
+REVOKE ALL ON FUNCTION drain_inventory_recompute_queue() FROM anon;
 GRANT EXECUTE ON FUNCTION drain_inventory_recompute_queue() TO service_role;
 CREATE OR REPLACE FUNCTION public.enqueue_floriday_continuous_stock()
  RETURNS trigger
@@ -2264,8 +2297,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION enqueue_floriday_continuous_stock() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION enqueue_floriday_continuous_stock() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION enqueue_floriday_continuous_stock() TO anon;
+REVOKE ALL ON FUNCTION enqueue_floriday_continuous_stock() FROM anon;
+REVOKE EXECUTE ON FUNCTION enqueue_floriday_continuous_stock() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION enqueue_floriday_continuous_stock() TO authenticated;
+GRANT EXECUTE ON FUNCTION enqueue_floriday_continuous_stock() TO service_role;
+REVOKE EXECUTE ON FUNCTION enqueue_floriday_continuous_stock() FROM anon;
 GRANT EXECUTE ON FUNCTION enqueue_floriday_continuous_stock() TO authenticated;
 GRANT EXECUTE ON FUNCTION enqueue_floriday_continuous_stock() TO service_role;
 CREATE OR REPLACE FUNCTION public.enqueue_floriday_continuous_stock_after_warehouse_preference()
@@ -2310,8 +2346,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION enqueue_floriday_continuous_stock_after_warehouse_preference() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION enqueue_floriday_continuous_stock_after_warehouse_preference() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION enqueue_floriday_continuous_stock_after_warehouse_preference() TO anon;
+REVOKE ALL ON FUNCTION enqueue_floriday_continuous_stock_after_warehouse_preference() FROM anon;
+REVOKE EXECUTE ON FUNCTION enqueue_floriday_continuous_stock_after_warehouse_preference() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION enqueue_floriday_continuous_stock_after_warehouse_preference() TO authenticated;
+GRANT EXECUTE ON FUNCTION enqueue_floriday_continuous_stock_after_warehouse_preference() TO service_role;
+REVOKE EXECUTE ON FUNCTION enqueue_floriday_continuous_stock_after_warehouse_preference() FROM anon;
 GRANT EXECUTE ON FUNCTION enqueue_floriday_continuous_stock_after_warehouse_preference() TO authenticated;
 GRANT EXECUTE ON FUNCTION enqueue_floriday_continuous_stock_after_warehouse_preference() TO service_role;
 CREATE OR REPLACE FUNCTION public.enqueue_structure_recompute(p_product_ids uuid[], p_reason text, p_include_self boolean DEFAULT false)
@@ -2322,6 +2361,7 @@ CREATE OR REPLACE FUNCTION public.enqueue_structure_recompute(p_product_ids uuid
 AS $function$
 DECLARE n integer := 0;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'enqueue_structure_recompute');
   IF p_product_ids IS NULL OR cardinality(p_product_ids) = 0 THEN RETURN 0; END IF;
   INSERT INTO public.inventory_recompute_queue(product_id, reason)
   SELECT DISTINCT id, p_reason FROM (
@@ -2334,6 +2374,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION enqueue_structure_recompute(uuid[],text,boolean) FROM PUBLIC;
+REVOKE ALL ON FUNCTION enqueue_structure_recompute(uuid[],text,boolean) FROM anon;
 GRANT EXECUTE ON FUNCTION enqueue_structure_recompute(uuid[],text,boolean) TO service_role;
 CREATE OR REPLACE FUNCTION public.ensure_inventory_recompute_drain()
  RETURNS void
@@ -2342,6 +2383,7 @@ CREATE OR REPLACE FUNCTION public.ensure_inventory_recompute_drain()
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'ensure_inventory_recompute_drain');
   IF NOT EXISTS (SELECT 1 FROM cron.job WHERE jobname = 'inventory-recompute-drain') THEN
     PERFORM cron.schedule('inventory-recompute-drain', '* * * * *', 'select public.drain_inventory_recompute_queue()');
   END IF;
@@ -2350,6 +2392,7 @@ EXCEPTION WHEN others THEN
 END $function$
 ;
 REVOKE ALL ON FUNCTION ensure_inventory_recompute_drain() FROM PUBLIC;
+REVOKE ALL ON FUNCTION ensure_inventory_recompute_drain() FROM anon;
 GRANT EXECUTE ON FUNCTION ensure_inventory_recompute_drain() TO service_role;
 CREATE OR REPLACE FUNCTION public.ensure_trade_item_stock_row(p_key text)
  RETURNS void
@@ -2358,12 +2401,14 @@ CREATE OR REPLACE FUNCTION public.ensure_trade_item_stock_row(p_key text)
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'ensure_trade_item_stock_row');
   PERFORM public.ensure_trade_item_stock_row_key(p_key);
 END
 $function$
 ;
 REVOKE ALL ON FUNCTION ensure_trade_item_stock_row(text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION ensure_trade_item_stock_row(text) TO anon;
+REVOKE ALL ON FUNCTION ensure_trade_item_stock_row(text) FROM anon;
+REVOKE EXECUTE ON FUNCTION ensure_trade_item_stock_row(text) FROM anon;
 GRANT EXECUTE ON FUNCTION ensure_trade_item_stock_row(text) TO authenticated;
 GRANT EXECUTE ON FUNCTION ensure_trade_item_stock_row(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.ensure_trade_item_stock_row_key(p_key text)
@@ -2377,6 +2422,7 @@ DECLARE
   v_product_id uuid;
   v_canonical_key text;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'ensure_trade_item_stock_row_key');
   IF p_key IS NULL OR btrim(p_key) = '' THEN
     RETURN NULL;
   END IF;
@@ -2450,6 +2496,7 @@ END
 $function$
 ;
 REVOKE ALL ON FUNCTION ensure_trade_item_stock_row_key(text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION ensure_trade_item_stock_row_key(text) FROM anon;
 GRANT EXECUTE ON FUNCTION ensure_trade_item_stock_row_key(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.fcsq_block_disabled()
  RETURNS trigger
@@ -2469,6 +2516,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION fcsq_block_disabled() FROM PUBLIC;
+REVOKE ALL ON FUNCTION fcsq_block_disabled() FROM anon;
 GRANT EXECUTE ON FUNCTION fcsq_block_disabled() TO service_role;
 CREATE OR REPLACE FUNCTION public.fcsq_fallback_supersede()
  RETURNS trigger
@@ -2498,6 +2546,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION fcsq_fallback_supersede() FROM PUBLIC;
+REVOKE ALL ON FUNCTION fcsq_fallback_supersede() FROM anon;
 GRANT EXECUTE ON FUNCTION fcsq_fallback_supersede() TO service_role;
 CREATE OR REPLACE FUNCTION public.fcsq_wake_base_supply()
  RETURNS trigger
@@ -2522,6 +2571,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION fcsq_wake_base_supply() FROM PUBLIC;
+REVOKE ALL ON FUNCTION fcsq_wake_base_supply() FROM anon;
 GRANT EXECUTE ON FUNCTION fcsq_wake_base_supply() TO service_role;
 CREATE OR REPLACE FUNCTION public.find_trade_item_key(p_name text, p_barcode text, p_product_id uuid)
  RETURNS text
@@ -2531,6 +2581,7 @@ CREATE OR REPLACE FUNCTION public.find_trade_item_key(p_name text, p_barcode tex
 AS $function$
 DECLARE v_key text; v_bar text; v_name text;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'find_trade_item_key');
   v_bar  := NULLIF(btrim(p_barcode), '');
   v_name := NULLIF(lower(btrim(p_name)), '');
@@ -2577,8 +2628,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION find_trade_item_key(text,text,uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) TO anon;
+REVOKE ALL ON FUNCTION find_trade_item_key(text,text,uuid) FROM anon;
+REVOKE EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) TO authenticated;
+GRANT EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) TO service_role;
+REVOKE EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION find_trade_item_key(text,text,uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_adopt_connection(p_old uuid, p_new uuid)
@@ -2592,6 +2646,7 @@ DECLARE
   v_moved jsonb := '{}'::jsonb;
   v_count bigint;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'floriday_adopt_connection');
   IF p_old IS NULL OR p_new IS NULL OR p_old = p_new THEN
     RETURN jsonb_build_object('ok', false, 'reason', 'ongeldige connecties');
   END IF;
@@ -2630,7 +2685,8 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_adopt_connection(uuid,uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION floriday_adopt_connection(uuid,uuid) TO anon;
+REVOKE ALL ON FUNCTION floriday_adopt_connection(uuid,uuid) FROM anon;
+REVOKE EXECUTE ON FUNCTION floriday_adopt_connection(uuid,uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_adopt_connection(uuid,uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION floriday_adopt_connection(uuid,uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_autoheal_connections()
@@ -2646,6 +2702,7 @@ DECLARE
   v_adopted jsonb := '[]'::jsonb;
   v_relink jsonb;
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'floriday_autoheal_connections');
   FOR env IN
     SELECT environment
     FROM public.floriday_connections
@@ -2675,7 +2732,8 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_autoheal_connections() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION floriday_autoheal_connections() TO anon;
+REVOKE ALL ON FUNCTION floriday_autoheal_connections() FROM anon;
+REVOKE EXECUTE ON FUNCTION floriday_autoheal_connections() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_autoheal_connections() TO authenticated;
 GRANT EXECUTE ON FUNCTION floriday_autoheal_connections() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_capture_stock_snapshot()
@@ -2687,6 +2745,7 @@ AS $function$
 DECLARE
   v_rows integer;
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'floriday_capture_stock_snapshot');
   INSERT INTO public.inventory_stock_snapshots (
     user_id, connection_id, snapshot_at, granularity,
     erp_available_quantity, floriday_desired_quantity, floriday_remote_quantity
@@ -2718,6 +2777,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_capture_stock_snapshot() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_capture_stock_snapshot() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_capture_stock_snapshot() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_cleanup_stock_queue_v2()
  RETURNS jsonb
@@ -2736,6 +2796,7 @@ DECLARE
   g jsonb; v_days int; v_total int; v_n int; v_batches int := 0;
   v_deleted jsonb := '{}'::jsonb; v_more boolean := false; v_statuses text[];
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'floriday_cleanup_stock_queue_v2');
   SELECT * INTO l FROM public.inventory_recompute_limits LIMIT 1;
   INSERT INTO public.floriday_queue_cleanup_runs DEFAULT VALUES RETURNING id INTO v_run;
   BEGIN
@@ -2767,6 +2828,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_cleanup_stock_queue_v2() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_cleanup_stock_queue_v2() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_cleanup_stock_queue_v2() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_compact_stock_snapshots()
  RETURNS void
@@ -2775,6 +2837,7 @@ CREATE OR REPLACE FUNCTION public.floriday_compact_stock_snapshots()
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'floriday_compact_stock_snapshots');
   INSERT INTO public.inventory_stock_snapshots (
     user_id, connection_id, snapshot_at, granularity,
     erp_available_quantity, floriday_desired_quantity, floriday_remote_quantity
@@ -2797,6 +2860,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_compact_stock_snapshots() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_compact_stock_snapshots() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_compact_stock_snapshots() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_default_owner(p_connection_id uuid)
  RETURNS uuid
@@ -2815,6 +2879,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_default_owner(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_default_owner(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_default_owner(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_desired_stock_regression_check()
  RETURNS TABLE(product_id uuid, product_name text, stock_mode text, packing integer, available integer, expected integer, actual integer, equal boolean)
@@ -2847,6 +2912,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_desired_stock_regression_check() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_desired_stock_regression_check() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_desired_stock_regression_check() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_ensure_inventory_settings()
  RETURNS trigger
@@ -2877,6 +2943,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_ensure_inventory_settings() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_ensure_inventory_settings() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_ensure_inventory_settings() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_erp_leading_preview(p_connection_id uuid, p_product_ids uuid[], p_stock_mode text DEFAULT 'FOLLOW_ERP'::text)
  RETURNS TABLE(product_id uuid, product_name text, trade_item_id text, stock_mode text, desired_quantity integer, desired_available boolean, sale_price numeric, offer_forms jsonb, weeks jsonb, blocker text, horizon_weeks integer)
@@ -2887,7 +2954,8 @@ AS $function$
 DECLARE v_pid uuid; v_q int; v_av boolean; v_reason text; v_mode text; v_h int := public.floriday_publish_horizon_weeks(); v_w jsonb; v_d date; i int;
   v_tid text; v_price numeric; v_forms jsonb; v_y int; v_wk int; v_fl int;
 BEGIN
-  IF auth.uid() IS NULL OR NOT public.voorraad_can_write() THEN
+  PERFORM public.voorraad_vereis('ingelogd', 'floriday_erp_leading_preview');
+  IF NOT public.voorraad_is_server() AND (auth.uid() IS NULL OR NOT public.voorraad_can_write()) THEN
     RAISE EXCEPTION 'Je hebt geen rechten' USING ERRCODE = '42501'; END IF;
   IF p_stock_mode NOT IN ('FOLLOW_ERP','MAXIMUM','FIXED_REFILL','MANUAL') THEN RAISE EXCEPTION 'Kies een voorraadmodus'; END IF;
   FOREACH v_pid IN ARRAY p_product_ids LOOP
@@ -2943,6 +3011,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_erp_leading_preview(uuid,uuid[],text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_erp_leading_preview(uuid,uuid[],text) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_erp_leading_preview(uuid,uuid[],text) TO authenticated;
 GRANT EXECUTE ON FUNCTION floriday_erp_leading_preview(uuid,uuid[],text) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_fill_publish_horizon()
@@ -2955,6 +3024,7 @@ DECLARE
   r record;
   v_count integer := 0;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'floriday_fill_publish_horizon');
   -- verlopen weken afsluiten
   UPDATE public.floriday_continuous_stock_queue
      SET status = 'superseded', updated_at = now()
@@ -2977,6 +3047,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_fill_publish_horizon() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_fill_publish_horizon() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_fill_publish_horizon() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_follow_apply(p_connection_id uuid, p_items jsonb)
  RETURNS jsonb
@@ -2989,6 +3060,7 @@ DECLARE
   v_stock numeric; v_price numeric; v_res text; v_fs text; v_old_claims text;
   v_upd int := 0; v_same int := 0; v_skip int := 0; v_err int := 0;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'floriday_follow_apply');
   IF NOT public.voorraad_hook_on('follow_floriday') THEN
     RETURN jsonb_build_object('waiting', true, 'reason', 'Volgt Floriday staat uit');
   END IF;
@@ -3042,6 +3114,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_follow_apply(uuid,jsonb) FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_follow_apply(uuid,jsonb) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_follow_apply(uuid,jsonb) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_ingest_sales_orders(p_limit integer DEFAULT 200)
  RETURNS integer
@@ -3067,6 +3140,7 @@ DECLARE
   v_fust_delta integer;
   v_owner uuid;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'floriday_ingest_sales_orders');
   FOR r IN
     SELECT c.connection_id,
            c.floriday_id,
@@ -3242,6 +3316,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_ingest_sales_orders(integer) FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_ingest_sales_orders(integer) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_ingest_sales_orders(integer) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_leading_summary(p_connection_id uuid)
  RETURNS jsonb
@@ -3259,6 +3334,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_leading_summary(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_leading_summary(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_leading_summary(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION floriday_leading_summary(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_make_erp_leading(p_connection_id uuid, p_product_ids uuid[], p_stock_mode text DEFAULT 'FOLLOW_ERP'::text)
@@ -3269,7 +3345,8 @@ CREATE OR REPLACE FUNCTION public.floriday_make_erp_leading(p_connection_id uuid
 AS $function$
 DECLARE v_pid uuid; v_n int := 0; v_skipped jsonb := '[]'::jsonb; v_old text; v_block text; r record;
 BEGIN
-  IF auth.uid() IS NULL OR NOT public.voorraad_can_write() THEN
+  PERFORM public.voorraad_vereis('ingelogd', 'floriday_make_erp_leading');
+  IF NOT public.voorraad_is_server() AND (auth.uid() IS NULL OR NOT public.voorraad_can_write()) THEN
     RAISE EXCEPTION 'Je hebt geen rechten' USING ERRCODE = '42501'; END IF;
   IF p_stock_mode NOT IN ('FOLLOW_ERP','MAXIMUM','FIXED_REFILL','MANUAL') THEN
     RAISE EXCEPTION 'Kies een voorraadmodus'; END IF;
@@ -3302,6 +3379,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_make_erp_leading(uuid,uuid[],text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_make_erp_leading(uuid,uuid[],text) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_make_erp_leading(uuid,uuid[],text) TO authenticated;
 GRANT EXECUTE ON FUNCTION floriday_make_erp_leading(uuid,uuid[],text) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_norm_offer_forms(p jsonb)
@@ -3321,8 +3399,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_norm_offer_forms(jsonb) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION floriday_norm_offer_forms(jsonb) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION floriday_norm_offer_forms(jsonb) TO anon;
+REVOKE ALL ON FUNCTION floriday_norm_offer_forms(jsonb) FROM anon;
+REVOKE EXECUTE ON FUNCTION floriday_norm_offer_forms(jsonb) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION floriday_norm_offer_forms(jsonb) TO authenticated;
+GRANT EXECUTE ON FUNCTION floriday_norm_offer_forms(jsonb) TO service_role;
+REVOKE EXECUTE ON FUNCTION floriday_norm_offer_forms(jsonb) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_norm_offer_forms(jsonb) TO authenticated;
 GRANT EXECUTE ON FUNCTION floriday_norm_offer_forms(jsonb) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_orphan_settings_count()
@@ -3336,6 +3417,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_orphan_settings_count() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_orphan_settings_count() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_orphan_settings_count() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_publish_horizon_weeks()
  RETURNS integer
@@ -3349,6 +3431,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_publish_horizon_weeks() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_publish_horizon_weeks() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_publish_horizon_weeks() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_queue_erp_guard()
  RETURNS trigger
@@ -3413,6 +3496,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_queue_erp_guard() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_queue_erp_guard() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_queue_erp_guard() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_queue_first_positive()
  RETURNS trigger
@@ -3434,6 +3518,7 @@ EXCEPTION WHEN OTHERS THEN RETURN NULL;
 END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_queue_first_positive() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_queue_first_positive() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_queue_first_positive() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_recompute_inventory(p_connection_id uuid, p_product_id uuid, p_force boolean DEFAULT false)
  RETURNS void
@@ -3447,6 +3532,7 @@ DECLARE
   v_horizon integer := public.floriday_publish_horizon_weeks();
   v_offset integer; v_date date; v_year integer; v_week integer; v_changed boolean;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'floriday_recompute_inventory');
   SELECT * INTO s FROM public.floriday_inventory_settings
    WHERE connection_id = p_connection_id AND product_id = p_product_id;
   IF s.id IS NULL THEN RETURN; END IF;
@@ -3508,6 +3594,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_recompute_inventory(uuid,uuid,boolean) FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_recompute_inventory(uuid,uuid,boolean) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_recompute_inventory(uuid,uuid,boolean) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_relink_products(p_connection_id uuid DEFAULT NULL::uuid)
  RETURNS jsonb
@@ -3519,6 +3606,7 @@ DECLARE
   v_conn uuid; v_cache_count int; v_row RECORD; v_cf jsonb; v_cf_id text; v_match text;
   v_linked int := 0; v_repaired int := 0; v_cleared int := 0;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'floriday_relink_products');
   v_conn := p_connection_id;
   IF v_conn IS NULL THEN
     SELECT c.id INTO v_conn FROM public.floriday_settings s
@@ -3574,7 +3662,8 @@ BEGIN
 END; $function$
 ;
 REVOKE ALL ON FUNCTION floriday_relink_products(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION floriday_relink_products(uuid) TO anon;
+REVOKE ALL ON FUNCTION floriday_relink_products(uuid) FROM anon;
+REVOKE EXECUTE ON FUNCTION floriday_relink_products(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_relink_products(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION floriday_relink_products(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_requeue_dead_letters(p_connection_id uuid DEFAULT NULL::uuid)
@@ -3585,6 +3674,7 @@ CREATE OR REPLACE FUNCTION public.floriday_requeue_dead_letters(p_connection_id
 AS $function$
 DECLARE v_count integer;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'floriday_requeue_dead_letters');
   UPDATE public.floriday_continuous_stock_queue
      SET status = 'pending',
          attempts = 0,
@@ -3602,6 +3692,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_requeue_dead_letters(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_requeue_dead_letters(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_requeue_dead_letters(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_settings_change_recompute()
  RETURNS trigger
@@ -3625,6 +3716,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION floriday_settings_change_recompute() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_settings_change_recompute() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_settings_change_recompute() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_settings_change_recompute_stmt()
  RETURNS trigger
@@ -3655,6 +3747,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_settings_change_recompute_stmt() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_settings_change_recompute_stmt() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_settings_change_recompute_stmt() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_stock_change_recompute()
  RETURNS trigger
@@ -3690,6 +3783,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_stock_change_recompute() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_stock_change_recompute() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_stock_change_recompute() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_stock_queue_supersede()
  RETURNS trigger
@@ -3750,6 +3844,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_stock_queue_supersede() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_stock_queue_supersede() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_stock_queue_supersede() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_takeover_apply(p_connection_id uuid, p_items jsonb)
  RETURNS jsonb
@@ -3761,7 +3856,8 @@ DECLARE
   v_run uuid; v_it jsonb; v_tid text; v_pid uuid; v_created boolean; v_old_stock numeric; v_old_price numeric;
   v_old_lead boolean; v_old_forms jsonb; v_stock numeric; v_price numeric; v_n int := 0; v_c int := 0; v_name text; v_fs text;
 BEGIN
-  IF auth.uid() IS NULL OR NOT public.voorraad_can_write() THEN
+  PERFORM public.voorraad_vereis('ingelogd', 'floriday_takeover_apply');
+  IF NOT public.voorraad_is_server() AND (auth.uid() IS NULL OR NOT public.voorraad_can_write()) THEN
     RAISE EXCEPTION 'Je hebt geen rechten om voorraad over te nemen' USING ERRCODE = '42501';
   END IF;
   IF p_connection_id IS NULL OR NOT EXISTS (SELECT 1 FROM public.floriday_connections c WHERE c.id = p_connection_id) THEN
@@ -3828,6 +3924,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_takeover_apply(uuid,jsonb) FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_takeover_apply(uuid,jsonb) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_takeover_apply(uuid,jsonb) TO authenticated;
 GRANT EXECUTE ON FUNCTION floriday_takeover_apply(uuid,jsonb) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_takeover_fetch_state(p_connection_id uuid, p_entity text DEFAULT 'trade-items'::text)
@@ -3838,6 +3935,7 @@ CREATE OR REPLACE FUNCTION public.floriday_takeover_fetch_state(p_connection_id
 AS $function$
 DECLARE r record; v_found boolean; v_cached boolean := false;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'floriday_takeover_fetch_state');
   SELECT s.backfill_target_sequence, s.backfill_done_at, s.last_success_at INTO r
     FROM public.floriday_sync_state s WHERE s.connection_id = p_connection_id AND s.entity_type = p_entity LIMIT 1;
   v_found := FOUND;
@@ -3852,6 +3950,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_takeover_fetch_state(uuid,text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_takeover_fetch_state(uuid,text) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_takeover_fetch_state(uuid,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION floriday_takeover_fetch_state(uuid,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_takeover_store_forms()
@@ -3861,6 +3960,7 @@ CREATE OR REPLACE FUNCTION public.floriday_takeover_store_forms()
 AS $function$ BEGIN NEW.floriday_offer_forms := public.floriday_norm_offer_forms(NEW.floriday_offer_forms); RETURN NEW; END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_takeover_store_forms() FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_takeover_store_forms() FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_takeover_store_forms() TO service_role;
 CREATE OR REPLACE FUNCTION public.floriday_takeover_undo(p_run_id uuid)
  RETURNS jsonb
@@ -3871,7 +3971,8 @@ AS $function$
 DECLARE v_r public.floriday_takeover_runs%ROWTYPE; v_i public.floriday_takeover_items%ROWTYPE;
   v_cur numeric; v_curp numeric; v_curlead boolean; v_done int := 0; v_skip int := 0; v_reason text;
 BEGIN
-  IF auth.uid() IS NULL OR NOT public.voorraad_can_write() THEN
+  PERFORM public.voorraad_vereis('ingelogd', 'floriday_takeover_undo');
+  IF NOT public.voorraad_is_server() AND (auth.uid() IS NULL OR NOT public.voorraad_can_write()) THEN
     RAISE EXCEPTION 'Je hebt geen rechten om een overname terug te draaien' USING ERRCODE = '42501';
   END IF;
   SELECT * INTO v_r FROM public.floriday_takeover_runs WHERE id = p_run_id FOR UPDATE;
@@ -3914,6 +4015,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION floriday_takeover_undo(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION floriday_takeover_undo(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION floriday_takeover_undo(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION floriday_takeover_undo(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.fust_negative_stock_report()
@@ -3930,8 +4032,11 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION fust_negative_stock_report() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION fust_negative_stock_report() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION fust_negative_stock_report() TO anon;
+REVOKE ALL ON FUNCTION fust_negative_stock_report() FROM anon;
+REVOKE EXECUTE ON FUNCTION fust_negative_stock_report() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION fust_negative_stock_report() TO authenticated;
+GRANT EXECUTE ON FUNCTION fust_negative_stock_report() TO service_role;
+REVOKE EXECUTE ON FUNCTION fust_negative_stock_report() FROM anon;
 GRANT EXECUTE ON FUNCTION fust_negative_stock_report() TO authenticated;
 GRANT EXECUTE ON FUNCTION fust_negative_stock_report() TO service_role;
 CREATE OR REPLACE FUNCTION public.fust_types_duplicate_guard()
@@ -3951,38 +4056,8 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION fust_types_duplicate_guard() FROM PUBLIC;
+REVOKE ALL ON FUNCTION fust_types_duplicate_guard() FROM anon;
 GRANT EXECUTE ON FUNCTION fust_types_duplicate_guard() TO service_role;
-CREATE OR REPLACE FUNCTION public.get_active_floriday_connection_public()
- RETURNS TABLE(id uuid, label text, environment text, organization_name text, gln_code text, preferred_warehouse_id text, preferred_warehouse_name text, active_environment text)
- LANGUAGE sql
- STABLE SECURITY DEFINER
- SET search_path TO 'public'
-AS $function$
-  SELECT
-    c.id,
-    c.label,
-    c.environment,
-    c.organization_name,
-    c.gln_code,
-    c.preferred_warehouse_id,
-    c.preferred_warehouse_name,
-    s.active_environment
-  FROM public.floriday_settings s
-  LEFT JOIN LATERAL (
-    SELECT *
-    FROM public.floriday_connections fc
-    WHERE fc.is_active = true
-      AND fc.environment = s.active_environment
-    ORDER BY fc.updated_at DESC NULLS LAST, fc.created_at DESC NULLS LAST
-    LIMIT 1
-  ) c ON true
-  WHERE s.id = 1;
-$function$
-;
-REVOKE ALL ON FUNCTION get_active_floriday_connection_public() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION get_active_floriday_connection_public() TO anon;
-GRANT EXECUTE ON FUNCTION get_active_floriday_connection_public() TO authenticated;
-GRANT EXECUTE ON FUNCTION get_active_floriday_connection_public() TO service_role;
 CREATE OR REPLACE FUNCTION public.get_active_floriday_context()
  RETURNS TABLE(connection_id uuid, user_id uuid)
  LANGUAGE sql
@@ -3997,8 +4072,11 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION get_active_floriday_context() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION get_active_floriday_context() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION get_active_floriday_context() TO anon;
+REVOKE ALL ON FUNCTION get_active_floriday_context() FROM anon;
+REVOKE EXECUTE ON FUNCTION get_active_floriday_context() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION get_active_floriday_context() TO authenticated;
+GRANT EXECUTE ON FUNCTION get_active_floriday_context() TO service_role;
+REVOKE EXECUTE ON FUNCTION get_active_floriday_context() FROM anon;
 GRANT EXECUTE ON FUNCTION get_active_floriday_context() TO authenticated;
 GRANT EXECUTE ON FUNCTION get_active_floriday_context() TO service_role;
 CREATE OR REPLACE FUNCTION public.get_group_allocation_keys(p_product_id uuid)
@@ -4024,8 +4102,11 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION get_group_allocation_keys(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION get_group_allocation_keys(uuid) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION get_group_allocation_keys(uuid) TO anon;
+REVOKE ALL ON FUNCTION get_group_allocation_keys(uuid) FROM anon;
+REVOKE EXECUTE ON FUNCTION get_group_allocation_keys(uuid) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION get_group_allocation_keys(uuid) TO authenticated;
+GRANT EXECUTE ON FUNCTION get_group_allocation_keys(uuid) TO service_role;
+REVOKE EXECUTE ON FUNCTION get_group_allocation_keys(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION get_group_allocation_keys(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION get_group_allocation_keys(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.get_group_head_key(p_group_id uuid)
@@ -4054,8 +4135,11 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION get_group_head_key(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION get_group_head_key(uuid) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION get_group_head_key(uuid) TO anon;
+REVOKE ALL ON FUNCTION get_group_head_key(uuid) FROM anon;
+REVOKE EXECUTE ON FUNCTION get_group_head_key(uuid) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION get_group_head_key(uuid) TO authenticated;
+GRANT EXECUTE ON FUNCTION get_group_head_key(uuid) TO service_role;
+REVOKE EXECUTE ON FUNCTION get_group_head_key(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION get_group_head_key(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION get_group_head_key(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.get_product_stock(p_product_id uuid)
@@ -4068,7 +4152,8 @@ AS $function$
 DECLARE
   v_connection_id uuid; v_key text; v_product_key text; v_floriday_key text;
 BEGIN
-  IF auth.uid() IS NULL THEN RAISE EXCEPTION 'Niet ingelogd' USING ERRCODE = '42501'; END IF;
+  PERFORM public.voorraad_vereis('ingelogd', 'get_product_stock');
+  IF auth.uid() IS NULL AND NOT public.voorraad_is_server() THEN RAISE EXCEPTION 'Niet ingelogd' USING ERRCODE = '42501'; END IF;
   SELECT NULLIF(trim(COALESCE(p.floriday_trade_item_id, '')), ''), NULLIF(trim(COALESCE(p.trade_item_key, '')), '')
     INTO v_floriday_key, v_product_key FROM public.products p WHERE p.id = p_product_id;
   v_key := COALESCE(v_floriday_key, v_product_key, 'product:' || p_product_id::text);
@@ -4093,6 +4178,7 @@ BEGIN
 END; $function$
 ;
 REVOKE ALL ON FUNCTION get_product_stock(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION get_product_stock(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION get_product_stock(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION get_product_stock(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.get_product_structure_totals(p_product_id uuid)
@@ -4103,6 +4189,7 @@ CREATE OR REPLACE FUNCTION public.get_product_structure_totals(p_product_id uuid
 AS $function$
 DECLARE v_ctx record;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'get_product_structure_totals');
   SELECT * INTO v_ctx FROM public.get_active_floriday_context();
   IF v_ctx.connection_id IS NULL THEN
     RETURN jsonb_build_object('product_id',p_product_id,'type',public.product_type(p_product_id),'reason','NO_ACTIVE_CONNECTION');
@@ -4116,6 +4203,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION get_product_structure_totals(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION get_product_structure_totals(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION get_product_structure_totals(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION get_product_structure_totals(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.get_product_structure_totals_batch(p_product_ids uuid[])
@@ -4128,6 +4216,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION get_product_structure_totals_batch(uuid[]) FROM PUBLIC;
+REVOKE ALL ON FUNCTION get_product_structure_totals_batch(uuid[]) FROM anon;
 GRANT EXECUTE ON FUNCTION get_product_structure_totals_batch(uuid[]) TO authenticated;
 GRANT EXECUTE ON FUNCTION get_product_structure_totals_batch(uuid[]) TO service_role;
 CREATE OR REPLACE FUNCTION public.inventory_inline_budget_ok()
@@ -4138,6 +4227,7 @@ CREATE OR REPLACE FUNCTION public.inventory_inline_budget_ok()
 AS $function$
 DECLARE v_n int; v_t0 timestamptz; l record;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'inventory_inline_budget_ok');
   SELECT max_parents_inline, max_ms_inline INTO l FROM public.inventory_recompute_limits WHERE id;
   v_n := COALESCE(NULLIF(current_setting('inventory.inline_n', true),'')::int, 0) + 1;
   v_t0 := COALESCE(NULLIF(current_setting('inventory.inline_t0', true),'')::timestamptz, clock_timestamp());
@@ -4153,6 +4243,7 @@ EXCEPTION WHEN others THEN RETURN false;
 END $function$
 ;
 REVOKE ALL ON FUNCTION inventory_inline_budget_ok() FROM PUBLIC;
+REVOKE ALL ON FUNCTION inventory_inline_budget_ok() FROM anon;
 GRANT EXECUTE ON FUNCTION inventory_inline_budget_ok() TO service_role;
 CREATE OR REPLACE FUNCTION public.merge_products(_canonical uuid, _loser uuid)
  RETURNS void
@@ -4161,7 +4252,8 @@ CREATE OR REPLACE FUNCTION public.merge_products(_canonical uuid, _loser uuid)
  SET search_path TO 'public'
 AS $function$
 DECLARE loser_row record;
-BEGIN
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'merge_products');
   IF _canonical = _loser THEN RETURN; END IF;
   SELECT * INTO loser_row FROM public.products WHERE id = _loser;
   IF NOT FOUND THEN RETURN; END IF;
@@ -4189,96 +4281,13 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION merge_products(uuid,uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION merge_products(uuid,uuid) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION merge_products(uuid,uuid) TO anon;
+REVOKE ALL ON FUNCTION merge_products(uuid,uuid) FROM anon;
+REVOKE EXECUTE ON FUNCTION merge_products(uuid,uuid) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION merge_products(uuid,uuid) TO authenticated;
+GRANT EXECUTE ON FUNCTION merge_products(uuid,uuid) TO service_role;
+REVOKE EXECUTE ON FUNCTION merge_products(uuid,uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION merge_products(uuid,uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION merge_products(uuid,uuid) TO service_role;
-CREATE OR REPLACE FUNCTION public.mirror_offer_order_to_orders()
- RETURNS trigger
- LANGUAGE plpgsql
- SECURITY DEFINER
- SET search_path TO 'public'
-AS $function$
-DECLARE
-  v_order_id uuid; v_item jsonb;
-  v_total_numeric numeric := COALESCE(NEW.total_amount, 0);
-  v_total_text text; v_product_id uuid;
-  v_pieces int; v_plants_per_crate int; v_crate_price numeric;
-  v_qty int; v_unit text; v_unit_price numeric;
-BEGIN
-  IF EXISTS (SELECT 1 FROM public.orders WHERE (custom_fields->>'offer_order_id')::uuid = NEW.id) THEN
-    RETURN NEW;
-  END IF;
-  v_total_text := '€ ' || replace(replace(to_char(v_total_numeric,'FM999G999G990D00'),'.','X'),',','.');
-  v_total_text := replace(v_total_text,'X',',');
-  v_order_id := gen_random_uuid();
-  INSERT INTO public.orders (id, order_number, customer_name, customer_id, order_date, delivery_date,
-    status, total, notes, custom_fields, order_source, created_at, updated_at)
-  VALUES (v_order_id, NEW.order_number, COALESCE(NEW.customer_name,'Onbekende klant'), NEW.customer_id,
-    to_char(COALESCE(NEW.created_at,now()),'YYYY-MM-DD'), to_char(COALESCE(NEW.created_at,now()),'YYYY-MM-DD'),
-    'open', v_total_text, NEW.notes,
-    jsonb_build_object('source','offer','offer_order_id',NEW.id,'offer_campaign_id',NEW.campaign_id,
-      'offer_recipient_id',NEW.recipient_id,'customer_email',NEW.customer_email,'customer_phone',NEW.customer_phone,
-      'order_type','AO'),
-    'offer', COALESCE(NEW.created_at,now()), now());
-  IF jsonb_typeof(NEW.items)='array' THEN
-    FOR v_item IN SELECT * FROM jsonb_array_elements(NEW.items) LOOP
-      v_product_id := NULL;
-      BEGIN v_product_id := NULLIF(v_item->>'product_id','')::uuid;
-      EXCEPTION WHEN others THEN v_product_id := NULL; END;
-      v_pieces := COALESCE((v_item->>'quantity')::int,0);
-      v_unit_price := COALESCE((v_item->>'unit_price')::numeric,0);
-      v_qty := v_pieces;
-      v_unit := COALESCE(NULLIF(v_item->>'unit',''),'stuks');
-      -- Zoek plants_per_crate + tier prijs in offer_campaign_products
-      v_plants_per_crate := NULL; v_crate_price := NULL;
-      IF v_product_id IS NOT NULL AND NEW.campaign_id IS NOT NULL THEN
-        SELECT plants_per_crate INTO v_plants_per_crate
-        FROM public.offer_campaign_products
-        WHERE id = v_product_id AND campaign_id = NEW.campaign_id;
-        IF v_plants_per_crate IS NOT NULL AND v_plants_per_crate > 0 THEN
-          v_qty := CEIL(v_pieces::numeric / v_plants_per_crate)::int;
-          v_unit := 'fust';
-          -- Beste tier: hoogste min_crates <= v_qty
-          SELECT price_per_crate INTO v_crate_price
-          FROM public.offer_campaign_product_tiers
-          WHERE campaign_product_id = v_product_id AND min_crates <= v_qty
-          ORDER BY min_crates DESC LIMIT 1;
-          IF v_crate_price IS NOT NULL THEN
-            v_unit_price := v_crate_price;
-          ELSE
-            v_unit_price := v_unit_price * v_plants_per_crate;
-          END IF;
-        END IF;
-      END IF;
-      -- v_product_id verwijst naar offer_campaign_products.id, niet products.id
-      IF v_product_id IS NOT NULL AND NOT EXISTS (SELECT 1 FROM public.products WHERE id = v_product_id) THEN
-        v_product_id := NULL;
-      END IF;
-      INSERT INTO public.order_items (order_id, product_id, product_name, quantity, unit, unit_price)
-      VALUES (v_order_id, v_product_id, COALESCE(v_item->>'product_name','Artikel'),
-        v_qty, v_unit, v_unit_price);
-    END LOOP;
-  END IF;
-  RETURN NEW;
-EXCEPTION WHEN OTHERS THEN
-  RAISE WARNING 'mirror_offer_order_to_orders failed for %: %', NEW.id, SQLERRM;
-  RETURN NEW;
-END;
-$function$
-;
-REVOKE ALL ON FUNCTION mirror_offer_order_to_orders() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION mirror_offer_order_to_orders() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION mirror_offer_order_to_orders() TO anon;
-GRANT EXECUTE ON FUNCTION mirror_offer_order_to_orders() TO authenticated;
-GRANT EXECUTE ON FUNCTION mirror_offer_order_to_orders() TO service_role;
 CREATE OR REPLACE FUNCTION public.normalize_order_source(p_src text)
  RETURNS text
  LANGUAGE sql
@@ -4296,8 +4305,11 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION normalize_order_source(text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION normalize_order_source(text) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION normalize_order_source(text) TO anon;
+REVOKE ALL ON FUNCTION normalize_order_source(text) FROM anon;
+REVOKE EXECUTE ON FUNCTION normalize_order_source(text) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION normalize_order_source(text) TO authenticated;
+GRANT EXECUTE ON FUNCTION normalize_order_source(text) TO service_role;
+REVOKE EXECUTE ON FUNCTION normalize_order_source(text) FROM anon;
 GRANT EXECUTE ON FUNCTION normalize_order_source(text) TO authenticated;
 GRANT EXECUTE ON FUNCTION normalize_order_source(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.process_inventory_recompute_queue(p_limit integer DEFAULT 200)
@@ -4308,6 +4320,7 @@ CREATE OR REPLACE FUNCTION public.process_inventory_recompute_queue(p_limit inte
 AS $function$
 DECLARE r record; s record; n integer := 0;
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'process_inventory_recompute_queue');
   FOR r IN SELECT q.product_id FROM public.inventory_recompute_queue q
             ORDER BY q.enqueued_at LIMIT GREATEST(1, LEAST(p_limit, 1000)) FOR UPDATE SKIP LOCKED LOOP
     BEGIN
@@ -4327,6 +4340,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION process_inventory_recompute_queue(integer) FROM PUBLIC;
+REVOKE ALL ON FUNCTION process_inventory_recompute_queue(integer) FROM anon;
 GRANT EXECUTE ON FUNCTION process_inventory_recompute_queue(integer) TO service_role;
 CREATE OR REPLACE FUNCTION public.produce_designed_product(p_parent_kind text, p_parent_id text, p_quantity numeric)
  RETURNS jsonb
@@ -4343,7 +4357,8 @@ DECLARE
   v_connection_id uuid;
   v_result jsonb;
   v_batch_id uuid := gen_random_uuid();
-BEGIN
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'produce_designed_product');
   IF v_uid IS NULL THEN RAISE EXCEPTION 'Niet ingelogd'; END IF;
   IF p_quantity IS NULL OR p_quantity <= 0 THEN RAISE EXCEPTION 'Aantal moet groter dan 0 zijn'; END IF;
@@ -4417,6 +4432,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION produce_designed_product(text,text,numeric) FROM PUBLIC;
+REVOKE ALL ON FUNCTION produce_designed_product(text,text,numeric) FROM anon;
 GRANT EXECUTE ON FUNCTION produce_designed_product(text,text,numeric) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_active_group_id(p_product_id uuid)
  RETURNS uuid
@@ -4434,6 +4450,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION product_active_group_id(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION product_active_group_id(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION product_active_group_id(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_id_from_ref(p_ref text)
  RETURNS uuid
@@ -4449,6 +4466,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION product_id_from_ref(text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION product_id_from_ref(text) FROM anon;
 GRANT EXECUTE ON FUNCTION product_id_from_ref(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_is_set(p_product_id uuid)
  RETURNS boolean
@@ -4461,6 +4479,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION product_is_set(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION product_is_set(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION product_is_set(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_label(p_id uuid)
  RETURNS text
@@ -4472,6 +4491,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION product_label(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION product_label(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION product_label(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_member_group_ids(p_product_id uuid)
  RETURNS uuid[]
@@ -4485,6 +4505,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION product_member_group_ids(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION product_member_group_ids(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION product_member_group_ids(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_own_available(p_connection_id uuid, p_product_id uuid, OUT has_row boolean, OUT physical numeric, OUT reserved numeric, OUT available integer)
  RETURNS record
@@ -4494,6 +4515,7 @@ CREATE OR REPLACE FUNCTION public.product_own_available(p_connection_id uuid, p_
 AS $function$
 DECLARE v_key text; v_p numeric; v_r numeric; v_hit boolean := false;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'product_own_available');
   has_row := false; physical := 0; reserved := 0; available := 0;
   SELECT COALESCE(NULLIF(btrim(COALESCE(p.floriday_trade_item_id,'')),''), NULLIF(btrim(COALESCE(p.trade_item_key,'')),''))
     INTO v_key FROM public.products p WHERE p.id = p_product_id;
@@ -4507,6 +4529,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION product_own_available(uuid,uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION product_own_available(uuid,uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION product_own_available(uuid,uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_packings_derive(p_product_id uuid)
  RETURNS void
@@ -4516,6 +4539,7 @@ CREATE OR REPLACE FUNCTION public.product_packings_derive(p_product_id uuid)
 AS $function$
 DECLARE r record; v_nullable boolean;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'product_packings_derive');
   SELECT * INTO r FROM public.product_packings WHERE product_id = p_product_id AND is_primary LIMIT 1;
   IF FOUND AND r.pieces_per_package > 0 AND r.packages_per_layer > 0 AND r.layers_per_load_carrier > 0 THEN
     UPDATE public.products SET
@@ -4540,6 +4564,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION product_packings_derive(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION product_packings_derive(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION product_packings_derive(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_packings_replace(p_product_id uuid, p_source text, p_packings jsonb)
  RETURNS integer
@@ -4548,6 +4573,7 @@ CREATE OR REPLACE FUNCTION public.product_packings_replace(p_product_id uuid, p_
 AS $function$
 DECLARE n integer;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'product_packings_replace');
   IF p_source NOT IN ('floriday','eigen') THEN RAISE EXCEPTION 'Onbekende verpakkingsbron %', p_source; END IF;
   DELETE FROM public.product_packings WHERE product_id = p_product_id;
   INSERT INTO public.product_packings(product_id, source, floriday_packing_id, vbn_package_code, custom_package_id,
@@ -4564,8 +4590,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION product_packings_replace(uuid,text,jsonb) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION product_packings_replace(uuid,text,jsonb) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION product_packings_replace(uuid,text,jsonb) TO anon;
+REVOKE ALL ON FUNCTION product_packings_replace(uuid,text,jsonb) FROM anon;
+REVOKE EXECUTE ON FUNCTION product_packings_replace(uuid,text,jsonb) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION product_packings_replace(uuid,text,jsonb) TO authenticated;
+GRANT EXECUTE ON FUNCTION product_packings_replace(uuid,text,jsonb) TO service_role;
+REVOKE EXECUTE ON FUNCTION product_packings_replace(uuid,text,jsonb) FROM anon;
 GRANT EXECUTE ON FUNCTION product_packings_replace(uuid,text,jsonb) TO authenticated;
 GRANT EXECUTE ON FUNCTION product_packings_replace(uuid,text,jsonb) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_packings_sync_from_floriday(p_connection_id uuid, p_product_ids uuid[], p_only_existing boolean DEFAULT false)
@@ -4575,6 +4604,7 @@ CREATE OR REPLACE FUNCTION public.product_packings_sync_from_floriday(p_connecti
 AS $function$
 DECLARE r record; v_list jsonb; n_done int := 0; n_missing int := 0;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'product_packings_sync_from_floriday');
   FOR r IN
     SELECT p.id, c.data
       FROM public.products p
@@ -4609,8 +4639,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION product_packings_sync_from_floriday(uuid,uuid[],boolean) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION product_packings_sync_from_floriday(uuid,uuid[],boolean) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION product_packings_sync_from_floriday(uuid,uuid[],boolean) TO anon;
+REVOKE ALL ON FUNCTION product_packings_sync_from_floriday(uuid,uuid[],boolean) FROM anon;
+REVOKE EXECUTE ON FUNCTION product_packings_sync_from_floriday(uuid,uuid[],boolean) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION product_packings_sync_from_floriday(uuid,uuid[],boolean) TO authenticated;
+GRANT EXECUTE ON FUNCTION product_packings_sync_from_floriday(uuid,uuid[],boolean) TO service_role;
+REVOKE EXECUTE ON FUNCTION product_packings_sync_from_floriday(uuid,uuid[],boolean) FROM anon;
 GRANT EXECUTE ON FUNCTION product_packings_sync_from_floriday(uuid,uuid[],boolean) TO authenticated;
 GRANT EXECUTE ON FUNCTION product_packings_sync_from_floriday(uuid,uuid[],boolean) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_primary_pieces(p_product_id uuid)
@@ -4626,8 +4659,11 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION product_primary_pieces(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION product_primary_pieces(uuid) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION product_primary_pieces(uuid) TO anon;
+REVOKE ALL ON FUNCTION product_primary_pieces(uuid) FROM anon;
+REVOKE EXECUTE ON FUNCTION product_primary_pieces(uuid) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION product_primary_pieces(uuid) TO authenticated;
+GRANT EXECUTE ON FUNCTION product_primary_pieces(uuid) TO service_role;
+REVOKE EXECUTE ON FUNCTION product_primary_pieces(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION product_primary_pieces(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION product_primary_pieces(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_set_depth_above(p_product_id uuid, p_path uuid[] DEFAULT '{}'::uuid[])
@@ -4638,6 +4674,7 @@ CREATE OR REPLACE FUNCTION public.product_set_depth_above(p_product_id uuid, p_p
 AS $function$
 DECLARE r record; d integer := 0; v integer;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'product_set_depth_above');
   IF p_product_id = ANY(p_path) OR cardinality(p_path) > 10 THEN RETURN 99; END IF;
   FOR r IN SELECT DISTINCT COALESCE(b.parent_product_id, public.product_id_from_ref(b.parent_trade_item_floriday_id)) AS p
              FROM public.product_bom_items b
@@ -4651,6 +4688,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION product_set_depth_above(uuid,uuid[]) FROM PUBLIC;
+REVOKE ALL ON FUNCTION product_set_depth_above(uuid,uuid[]) FROM anon;
 GRANT EXECUTE ON FUNCTION product_set_depth_above(uuid,uuid[]) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_set_depth_below(p_product_id uuid, p_path uuid[] DEFAULT '{}'::uuid[])
  RETURNS integer
@@ -4660,6 +4698,7 @@ CREATE OR REPLACE FUNCTION public.product_set_depth_below(p_product_id uuid, p_p
 AS $function$
 DECLARE r record; d integer := 0; v integer;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'product_set_depth_below');
   IF p_product_id = ANY(p_path) OR cardinality(p_path) > 10 THEN RETURN 99; END IF;
   IF NOT public.product_is_set(p_product_id) THEN RETURN 0; END IF;
   FOR r IN SELECT COALESCE(b.component_product_id, public.product_id_from_ref(b.component_trade_item_floriday_id)) AS c
@@ -4674,6 +4713,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION product_set_depth_below(uuid,uuid[]) FROM PUBLIC;
+REVOKE ALL ON FUNCTION product_set_depth_below(uuid,uuid[]) FROM anon;
 GRANT EXECUTE ON FUNCTION product_set_depth_below(uuid,uuid[]) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_structure_ancestors(p_product_ids uuid[])
  RETURNS SETOF uuid
@@ -4701,6 +4741,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION product_structure_ancestors(uuid[]) FROM PUBLIC;
+REVOKE ALL ON FUNCTION product_structure_ancestors(uuid[]) FROM anon;
 GRANT EXECUTE ON FUNCTION product_structure_ancestors(uuid[]) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_structure_max_depth()
  RETURNS integer
@@ -4710,8 +4751,11 @@ CREATE OR REPLACE FUNCTION public.product_structure_max_depth()
 AS $function$ SELECT 3 $function$
 ;
 REVOKE ALL ON FUNCTION product_structure_max_depth() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION product_structure_max_depth() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION product_structure_max_depth() TO anon;
+REVOKE ALL ON FUNCTION product_structure_max_depth() FROM anon;
+REVOKE EXECUTE ON FUNCTION product_structure_max_depth() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION product_structure_max_depth() TO authenticated;
+GRANT EXECUTE ON FUNCTION product_structure_max_depth() TO service_role;
+REVOKE EXECUTE ON FUNCTION product_structure_max_depth() FROM anon;
 GRANT EXECUTE ON FUNCTION product_structure_max_depth() TO authenticated;
 GRANT EXECUTE ON FUNCTION product_structure_max_depth() TO service_role;
 CREATE OR REPLACE FUNCTION public.product_structure_path(p_from uuid, p_target uuid)
@@ -4739,6 +4783,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION product_structure_path(uuid,uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION product_structure_path(uuid,uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION product_structure_path(uuid,uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.product_tray_stickers_touch()
  RETURNS trigger
@@ -4748,8 +4793,11 @@ AS $function$
 BEGIN NEW.updated_at = now(); RETURN NEW; END; $function$
 ;
 REVOKE ALL ON FUNCTION product_tray_stickers_touch() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION product_tray_stickers_touch() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION product_tray_stickers_touch() TO anon;
+REVOKE ALL ON FUNCTION product_tray_stickers_touch() FROM anon;
+REVOKE EXECUTE ON FUNCTION product_tray_stickers_touch() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION product_tray_stickers_touch() TO authenticated;
+GRANT EXECUTE ON FUNCTION product_tray_stickers_touch() TO service_role;
+REVOKE EXECUTE ON FUNCTION product_tray_stickers_touch() FROM anon;
 GRANT EXECUTE ON FUNCTION product_tray_stickers_touch() TO authenticated;
 GRANT EXECUTE ON FUNCTION product_tray_stickers_touch() TO service_role;
 CREATE OR REPLACE FUNCTION public.product_type(p_product_id uuid)
@@ -4764,6 +4812,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION product_type(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION product_type(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION product_type(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.promote_trade_item_key(p_old text, p_new text)
  RETURNS void
@@ -4773,6 +4822,7 @@ CREATE OR REPLACE FUNCTION public.promote_trade_item_key(p_old text, p_new text)
 AS $function$
 DECLARE r RECORD; v_existing_id uuid;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'promote_trade_item_key');
   IF p_old IS NULL OR p_new IS NULL OR p_old = p_new THEN RETURN; END IF;
   FOR r IN SELECT * FROM public.trade_item_stock WHERE trade_item_key = p_old FOR UPDATE LOOP
     SELECT id INTO v_existing_id FROM public.trade_item_stock
@@ -4796,8 +4846,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION promote_trade_item_key(text,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION promote_trade_item_key(text,text) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION promote_trade_item_key(text,text) TO anon;
+REVOKE ALL ON FUNCTION promote_trade_item_key(text,text) FROM anon;
+REVOKE EXECUTE ON FUNCTION promote_trade_item_key(text,text) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION promote_trade_item_key(text,text) TO authenticated;
+GRANT EXECUTE ON FUNCTION promote_trade_item_key(text,text) TO service_role;
+REVOKE EXECUTE ON FUNCTION promote_trade_item_key(text,text) FROM anon;
 GRANT EXECUTE ON FUNCTION promote_trade_item_key(text,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION promote_trade_item_key(text,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.recompute_all_reserved_stock()
@@ -4813,6 +4866,7 @@ DECLARE
   v_struct jsonb := '[]'::jsonb; v_struct_qty numeric := 0;
   v_frozen_ids uuid[];
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'recompute_all_reserved_stock');
   IF current_setting('app.recomputing_reserved', true) = 'on' THEN RETURN; END IF;
   PERFORM set_config('app.recomputing_reserved', 'on', true);
@@ -5003,8 +5057,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION recompute_all_reserved_stock() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION recompute_all_reserved_stock() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION recompute_all_reserved_stock() TO anon;
+REVOKE ALL ON FUNCTION recompute_all_reserved_stock() FROM anon;
+REVOKE EXECUTE ON FUNCTION recompute_all_reserved_stock() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION recompute_all_reserved_stock() TO authenticated;
+GRANT EXECUTE ON FUNCTION recompute_all_reserved_stock() TO service_role;
+REVOKE EXECUTE ON FUNCTION recompute_all_reserved_stock() FROM anon;
 GRANT EXECUTE ON FUNCTION recompute_all_reserved_stock() TO authenticated;
 GRANT EXECUTE ON FUNCTION recompute_all_reserved_stock() TO service_role;
 CREATE OR REPLACE FUNCTION public.recompute_order_status(p_order_id uuid)
@@ -5020,6 +5077,7 @@ DECLARE
   v_total integer;
   v_delivered integer;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'recompute_order_status');
   SELECT o.status, o.order_number
     INTO v_current, v_order_number
     FROM public.orders o
@@ -5058,8 +5116,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION recompute_order_status(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION recompute_order_status(uuid) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION recompute_order_status(uuid) TO anon;
+REVOKE ALL ON FUNCTION recompute_order_status(uuid) FROM anon;
+REVOKE EXECUTE ON FUNCTION recompute_order_status(uuid) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION recompute_order_status(uuid) TO authenticated;
+GRANT EXECUTE ON FUNCTION recompute_order_status(uuid) TO service_role;
+REVOKE EXECUTE ON FUNCTION recompute_order_status(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION recompute_order_status(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION recompute_order_status(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.recompute_reserved_for_order(p_order_id uuid)
@@ -5070,6 +5131,7 @@ CREATE OR REPLACE FUNCTION public.recompute_reserved_for_order(p_order_id uuid)
 AS $function$
 DECLARE k text;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'recompute_reserved_for_order');
   FOR k IN
     SELECT DISTINCT p.trade_item_key
     FROM logistics_active.order_items oi
@@ -5081,8 +5143,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION recompute_reserved_for_order(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) TO anon;
+REVOKE ALL ON FUNCTION recompute_reserved_for_order(uuid) FROM anon;
+REVOKE EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) TO authenticated;
+GRANT EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) TO service_role;
+REVOKE EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION recompute_reserved_for_order(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.recompute_reserved_stock(p_trade_item_key text)
@@ -5098,6 +5163,7 @@ DECLARE
   v_pid uuid;
   v_leads boolean;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'recompute_reserved_stock');
   IF p_trade_item_key IS NULL OR btrim(p_trade_item_key) = '' THEN RETURN; END IF;
   IF current_setting('app.recomputing_reserved', true) = 'on' THEN RETURN; END IF;
@@ -5179,8 +5245,11 @@ END
 $function$
 ;
 REVOKE ALL ON FUNCTION recompute_reserved_stock(text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION recompute_reserved_stock(text) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION recompute_reserved_stock(text) TO anon;
+REVOKE ALL ON FUNCTION recompute_reserved_stock(text) FROM anon;
+REVOKE EXECUTE ON FUNCTION recompute_reserved_stock(text) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION recompute_reserved_stock(text) TO authenticated;
+GRANT EXECUTE ON FUNCTION recompute_reserved_stock(text) TO service_role;
+REVOKE EXECUTE ON FUNCTION recompute_reserved_stock(text) FROM anon;
 GRANT EXECUTE ON FUNCTION recompute_reserved_stock(text) TO authenticated;
 GRANT EXECUTE ON FUNCTION recompute_reserved_stock(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.requeue_skipped_stock_rows(p_status text, p_connection_id uuid, p_trade_item_id text DEFAULT NULL::text)
@@ -5191,6 +5260,7 @@ CREATE OR REPLACE FUNCTION public.requeue_skipped_stock_rows(p_status text, p_co
 AS $function$
 DECLARE r record; n integer := 0;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'requeue_skipped_stock_rows');
   FOR r IN
     SELECT DISTINCT ON (trade_item_id) id, trade_item_id
       FROM public.floriday_continuous_stock_queue
@@ -5210,6 +5280,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION requeue_skipped_stock_rows(text,uuid,text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION requeue_skipped_stock_rows(text,uuid,text) FROM anon;
 GRANT EXECUTE ON FUNCTION requeue_skipped_stock_rows(text,uuid,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.reset_stalled_floriday_stock_queue(p_include_failed boolean DEFAULT true)
  RETURNS integer
@@ -5221,6 +5292,7 @@ DECLARE
   v_count integer := 0;
   v_n integer;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'reset_stalled_floriday_stock_queue');
   -- Geclaimd maar nooit afgerond (worker gecrasht): terug in de wachtrij.
   UPDATE public.floriday_continuous_stock_queue
      SET status = 'pending',
@@ -5261,6 +5333,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION reset_stalled_floriday_stock_queue(boolean) FROM PUBLIC;
+REVOKE ALL ON FUNCTION reset_stalled_floriday_stock_queue(boolean) FROM anon;
 GRANT EXECUTE ON FUNCTION reset_stalled_floriday_stock_queue(boolean) TO authenticated;
 GRANT EXECUTE ON FUNCTION reset_stalled_floriday_stock_queue(boolean) TO service_role;
 CREATE OR REPLACE FUNCTION public.resolve_group_allocation(_product_group_id uuid, _needed integer)
@@ -5275,7 +5348,8 @@ DECLARE
   take integer;
   avail integer;
   fallback_key text := NULL;
-BEGIN
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'resolve_group_allocation');
   FOR r IN
     SELECT public.resolve_group_member_stock_key(pgi.trade_item_id) AS stock_key,
            COALESCE(ts.physical_stock, 0)::integer AS physical_stock,
@@ -5311,8 +5385,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION resolve_group_allocation(uuid,integer) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) TO anon;
+REVOKE ALL ON FUNCTION resolve_group_allocation(uuid,integer) FROM anon;
+REVOKE EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) TO authenticated;
+GRANT EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) TO service_role;
+REVOKE EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) FROM anon;
 GRANT EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) TO authenticated;
 GRANT EXECUTE ON FUNCTION resolve_group_allocation(uuid,integer) TO service_role;
 CREATE OR REPLACE FUNCTION public.resolve_group_member_stock_key(p_trade_item_id text)
@@ -5358,7 +5435,8 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION resolve_group_member_stock_key(text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION resolve_group_member_stock_key(text) TO anon;
+REVOKE ALL ON FUNCTION resolve_group_member_stock_key(text) FROM anon;
+REVOKE EXECUTE ON FUNCTION resolve_group_member_stock_key(text) FROM anon;
 GRANT EXECUTE ON FUNCTION resolve_group_member_stock_key(text) TO authenticated;
 GRANT EXECUTE ON FUNCTION resolve_group_member_stock_key(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.resolve_product_id_for_item(p_product_name text)
@@ -5369,6 +5447,7 @@ CREATE OR REPLACE FUNCTION public.resolve_product_id_for_item(p_product_name tex
 AS $function$
 DECLARE v_id uuid;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'resolve_product_id_for_item');
   IF p_product_name IS NULL OR btrim(p_product_name) = '' THEN RETURN NULL; END IF;
   SELECT id INTO v_id FROM public.products
    WHERE lower(btrim(product)) = lower(btrim(p_product_name))
@@ -5377,8 +5456,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION resolve_product_id_for_item(text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION resolve_product_id_for_item(text) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION resolve_product_id_for_item(text) TO anon;
+REVOKE ALL ON FUNCTION resolve_product_id_for_item(text) FROM anon;
+REVOKE EXECUTE ON FUNCTION resolve_product_id_for_item(text) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION resolve_product_id_for_item(text) TO authenticated;
+GRANT EXECUTE ON FUNCTION resolve_product_id_for_item(text) TO service_role;
+REVOKE EXECUTE ON FUNCTION resolve_product_id_for_item(text) FROM anon;
 GRANT EXECUTE ON FUNCTION resolve_product_id_for_item(text) TO authenticated;
 GRANT EXECUTE ON FUNCTION resolve_product_id_for_item(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.resolve_stock_trade_item_key(p_product_id uuid)
@@ -5401,8 +5483,11 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION resolve_stock_trade_item_key(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) TO anon;
+REVOKE ALL ON FUNCTION resolve_stock_trade_item_key(uuid) FROM anon;
+REVOKE EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) TO authenticated;
+GRANT EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) TO service_role;
+REVOKE EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION resolve_stock_trade_item_key(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.reverse_production(p_parent_key text, p_quantity numeric, p_user_id uuid DEFAULT NULL::uuid, p_connection_id uuid DEFAULT NULL::uuid, p_reason text DEFAULT NULL::text)
@@ -5424,7 +5509,8 @@ DECLARE
   v_uid uuid := COALESCE(p_user_id, auth.uid());
   v_reversed jsonb := '[]'::jsonb;
   v_batches_processed int := 0;
-BEGIN
+BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'reverse_production');
   IF v_remaining <= 0 OR p_parent_key IS NULL THEN
     RETURN jsonb_build_object('ok', true, 'reversed', v_reversed);
   END IF;
@@ -5533,6 +5619,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION reverse_production(text,numeric,uuid,uuid,text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION reverse_production(text,numeric,uuid,uuid,text) FROM anon;
 GRANT EXECUTE ON FUNCTION reverse_production(text,numeric,uuid,uuid,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.run_floriday_base_supply_process()
  RETURNS void
@@ -5541,6 +5628,7 @@ CREATE OR REPLACE FUNCTION public.run_floriday_base_supply_process()
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'run_floriday_base_supply_process');
   IF NOT EXISTS (SELECT 1 FROM floriday_continuous_stock_queue q
                   WHERE q.status IN ('needs_base_supply','creating_base_supply') LIMIT 1) THEN
     PERFORM cron.unschedule(j.jobid) FROM cron.job j WHERE j.jobname = 'floriday-base-supply-retry';
@@ -5558,6 +5646,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION run_floriday_base_supply_process() FROM PUBLIC;
+REVOKE ALL ON FUNCTION run_floriday_base_supply_process() FROM anon;
 GRANT EXECUTE ON FUNCTION run_floriday_base_supply_process() TO service_role;
 CREATE OR REPLACE FUNCTION public.run_floriday_continuous_stock_sync()
  RETURNS void
@@ -5566,6 +5655,7 @@ CREATE OR REPLACE FUNCTION public.run_floriday_continuous_stock_sync()
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'run_floriday_continuous_stock_sync');
   IF public.voorraad_hook_on('continuous_stock') AND EXISTS (
        SELECT 1 FROM floriday_continuous_stock_queue WHERE status = 'pending'
          AND created_at < now() - interval '5 minutes' LIMIT 1) THEN
@@ -5577,8 +5667,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION run_floriday_continuous_stock_sync() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() TO anon;
+REVOKE ALL ON FUNCTION run_floriday_continuous_stock_sync() FROM anon;
+REVOKE EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() TO authenticated;
+GRANT EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() TO service_role;
+REVOKE EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() FROM anon;
 GRANT EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() TO authenticated;
 GRANT EXECUTE ON FUNCTION run_floriday_continuous_stock_sync() TO service_role;
 CREATE OR REPLACE FUNCTION public.run_floriday_follow()
@@ -5588,12 +5681,14 @@ CREATE OR REPLACE FUNCTION public.run_floriday_follow()
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'run_floriday_follow');
   IF NOT public.voorraad_hook_on('follow_floriday') THEN RETURN; END IF;
   IF NOT EXISTS (SELECT 1 FROM public.floriday_inventory_settings WHERE erp_leading = false LIMIT 1) THEN RETURN; END IF;
   PERFORM public.voorraad_hook_post('/api/public/hooks/floriday-follow', 55000);
 END $function$
 ;
 REVOKE ALL ON FUNCTION run_floriday_follow() FROM PUBLIC;
+REVOKE ALL ON FUNCTION run_floriday_follow() FROM anon;
 GRANT EXECUTE ON FUNCTION run_floriday_follow() TO service_role;
 CREATE OR REPLACE FUNCTION public.run_floriday_stock_queue_process()
  RETURNS void
@@ -5605,6 +5700,7 @@ DECLARE
   v_base_url text;
   v_apikey text;
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'run_floriday_stock_queue_process');
   SELECT value INTO v_base_url FROM public.module_runtime_config WHERE key = 'stock_queue_processor_base_url';
   SELECT value INTO v_apikey FROM public.module_runtime_config WHERE key = 'voorraad_hook_apikey';
@@ -5621,6 +5717,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION run_floriday_stock_queue_process() FROM PUBLIC;
+REVOKE ALL ON FUNCTION run_floriday_stock_queue_process() FROM anon;
 GRANT EXECUTE ON FUNCTION run_floriday_stock_queue_process() TO service_role;
 CREATE OR REPLACE FUNCTION public.run_floriday_stock_reconcile()
  RETURNS void
@@ -5629,11 +5726,13 @@ CREATE OR REPLACE FUNCTION public.run_floriday_stock_reconcile()
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'run_floriday_stock_reconcile');
   IF NOT public.voorraad_hook_on('stock_reconcile') THEN RETURN; END IF;
   PERFORM public.voorraad_hook_post('/api/public/hooks/floriday-stock-reconcile', 55000);
 END $function$
 ;
 REVOKE ALL ON FUNCTION run_floriday_stock_reconcile() FROM PUBLIC;
+REVOKE ALL ON FUNCTION run_floriday_stock_reconcile() FROM anon;
 GRANT EXECUTE ON FUNCTION run_floriday_stock_reconcile() TO service_role;
 CREATE OR REPLACE FUNCTION public.run_logistics_tasks_dispatch()
  RETURNS void
@@ -5642,6 +5741,7 @@ CREATE OR REPLACE FUNCTION public.run_logistics_tasks_dispatch()
  SET search_path TO 'public'
 AS $function$
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'run_logistics_tasks_dispatch');
   IF NOT public.voorraad_hook_on('logistics_tasks') THEN RETURN; END IF;
   IF NOT EXISTS (SELECT 1 FROM logistics_tasks t WHERE t.owner_module = 'voorraad'
        AND ((t.status IN ('planned','claimed') AND (t.next_attempt_at IS NULL OR t.next_attempt_at <= now()))
@@ -5652,8 +5752,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION run_logistics_tasks_dispatch() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION run_logistics_tasks_dispatch() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION run_logistics_tasks_dispatch() TO anon;
+REVOKE ALL ON FUNCTION run_logistics_tasks_dispatch() FROM anon;
+REVOKE EXECUTE ON FUNCTION run_logistics_tasks_dispatch() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION run_logistics_tasks_dispatch() TO authenticated;
+GRANT EXECUTE ON FUNCTION run_logistics_tasks_dispatch() TO service_role;
+REVOKE EXECUTE ON FUNCTION run_logistics_tasks_dispatch() FROM anon;
 GRANT EXECUTE ON FUNCTION run_logistics_tasks_dispatch() TO authenticated;
 GRANT EXECUTE ON FUNCTION run_logistics_tasks_dispatch() TO service_role;
 CREATE OR REPLACE FUNCTION public.self_heal_floriday_links()
@@ -5663,7 +5766,8 @@ CREATE OR REPLACE FUNCTION public.self_heal_floriday_links()
  SET search_path TO 'public'
 AS $function$
 DECLARE v_updated integer := 0; v_tmp integer;
-BEGIN
+BEGIN
+  PERFORM public.voorraad_vereis('server', 'self_heal_floriday_links');
   WITH upd AS (
     UPDATE public.products p
     SET floriday_trade_item_id = p.id::text,
@@ -5713,8 +5817,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION self_heal_floriday_links() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION self_heal_floriday_links() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION self_heal_floriday_links() TO anon;
+REVOKE ALL ON FUNCTION self_heal_floriday_links() FROM anon;
+REVOKE EXECUTE ON FUNCTION self_heal_floriday_links() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION self_heal_floriday_links() TO authenticated;
+GRANT EXECUTE ON FUNCTION self_heal_floriday_links() TO service_role;
+REVOKE EXECUTE ON FUNCTION self_heal_floriday_links() FROM anon;
 GRANT EXECUTE ON FUNCTION self_heal_floriday_links() TO authenticated;
 GRANT EXECUTE ON FUNCTION self_heal_floriday_links() TO service_role;
 CREATE OR REPLACE FUNCTION public.set_module_runtime_config_updated_at()
@@ -5729,8 +5836,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION set_module_runtime_config_updated_at() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION set_module_runtime_config_updated_at() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION set_module_runtime_config_updated_at() TO anon;
+REVOKE ALL ON FUNCTION set_module_runtime_config_updated_at() FROM anon;
+REVOKE EXECUTE ON FUNCTION set_module_runtime_config_updated_at() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION set_module_runtime_config_updated_at() TO authenticated;
+GRANT EXECUTE ON FUNCTION set_module_runtime_config_updated_at() TO service_role;
+REVOKE EXECUTE ON FUNCTION set_module_runtime_config_updated_at() FROM anon;
 GRANT EXECUTE ON FUNCTION set_module_runtime_config_updated_at() TO authenticated;
 GRANT EXECUTE ON FUNCTION set_module_runtime_config_updated_at() TO service_role;
 CREATE OR REPLACE FUNCTION public.set_product_bom_tenant()
@@ -5748,8 +5858,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION set_product_bom_tenant() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION set_product_bom_tenant() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION set_product_bom_tenant() TO anon;
+REVOKE ALL ON FUNCTION set_product_bom_tenant() FROM anon;
+REVOKE EXECUTE ON FUNCTION set_product_bom_tenant() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION set_product_bom_tenant() TO authenticated;
+GRANT EXECUTE ON FUNCTION set_product_bom_tenant() TO service_role;
+REVOKE EXECUTE ON FUNCTION set_product_bom_tenant() FROM anon;
 GRANT EXECUTE ON FUNCTION set_product_bom_tenant() TO authenticated;
 GRANT EXECUTE ON FUNCTION set_product_bom_tenant() TO service_role;
 CREATE OR REPLACE FUNCTION public.set_product_stock(p_product_id uuid, p_physical_stock numeric, p_minimum_stock numeric DEFAULT 0, p_incoming_stock numeric DEFAULT 0, p_notes text DEFAULT NULL::text)
@@ -5762,6 +5875,7 @@ AS $function$
 DECLARE
   v_user_id uuid := auth.uid(); v_connection_id uuid; v_key text; v_row_key text; v_product_key text; v_floriday_key text;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'set_product_stock');
   IF v_user_id IS NULL THEN RAISE EXCEPTION 'Niet ingelogd' USING ERRCODE = '42501'; END IF;
   IF p_physical_stock IS NULL THEN RAISE EXCEPTION 'Vul een voorraadaantal in'; END IF;
   IF p_physical_stock < 0 OR p_minimum_stock < 0 OR p_incoming_stock < 0 THEN
@@ -5797,6 +5911,7 @@ BEGIN
 END; $function$
 ;
 REVOKE ALL ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text) FROM anon;
 GRANT EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.set_product_stock(p_product_id uuid, p_physical_stock numeric, p_minimum_stock numeric DEFAULT 0, p_incoming_stock numeric DEFAULT 0, p_notes text DEFAULT NULL::text, p_change_source text DEFAULT NULL::text)
@@ -5809,6 +5924,7 @@ AS $function$
 DECLARE
   v_user_id uuid := auth.uid(); v_connection_id uuid; v_key text; v_row_key text; v_product_key text; v_floriday_key text; v_source text;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'set_product_stock');
   IF v_user_id IS NULL THEN RAISE EXCEPTION 'Niet ingelogd' USING ERRCODE = '42501'; END IF;
   IF p_physical_stock IS NULL THEN RAISE EXCEPTION 'Vul een voorraadaantal in'; END IF;
   IF p_physical_stock < 0 OR p_minimum_stock < 0 OR p_incoming_stock < 0 THEN
@@ -5854,8 +5970,11 @@ BEGIN
 END; $function$
 ;
 REVOKE ALL ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) TO anon;
+REVOKE ALL ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) FROM anon;
+REVOKE EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) TO authenticated;
+GRANT EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) TO service_role;
+REVOKE EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) FROM anon;
 GRANT EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) TO authenticated;
 GRANT EXECUTE ON FUNCTION set_product_stock(uuid,numeric,numeric,numeric,text,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.set_updated_at_order_fust_bookings()
@@ -5866,8 +5985,11 @@ AS $function$
 BEGIN NEW.updated_at = now(); RETURN NEW; END; $function$
 ;
 REVOKE ALL ON FUNCTION set_updated_at_order_fust_bookings() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION set_updated_at_order_fust_bookings() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION set_updated_at_order_fust_bookings() TO anon;
+REVOKE ALL ON FUNCTION set_updated_at_order_fust_bookings() FROM anon;
+REVOKE EXECUTE ON FUNCTION set_updated_at_order_fust_bookings() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION set_updated_at_order_fust_bookings() TO authenticated;
+GRANT EXECUTE ON FUNCTION set_updated_at_order_fust_bookings() TO service_role;
+REVOKE EXECUTE ON FUNCTION set_updated_at_order_fust_bookings() FROM anon;
 GRANT EXECUTE ON FUNCTION set_updated_at_order_fust_bookings() TO authenticated;
 GRANT EXECUTE ON FUNCTION set_updated_at_order_fust_bookings() TO service_role;
 CREATE OR REPLACE FUNCTION public.stock_import_cleanup()
@@ -5878,6 +6000,7 @@ CREATE OR REPLACE FUNCTION public.stock_import_cleanup()
 AS $function$
 DECLARE v_days int; n int := 0;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'stock_import_cleanup');
   SELECT import_retention_days INTO v_days FROM public.inventory_recompute_limits WHERE id;
   DELETE FROM public.stock_import_rows d
    WHERE d.id IN (SELECT ir.id FROM public.stock_import_rows ir JOIN public.stock_import_runs r ON r.id = ir.run_id
@@ -5895,6 +6018,7 @@ EXCEPTION WHEN others THEN
 END $function$
 ;
 REVOKE ALL ON FUNCTION stock_import_cleanup() FROM PUBLIC;
+REVOKE ALL ON FUNCTION stock_import_cleanup() FROM anon;
 GRANT EXECUTE ON FUNCTION stock_import_cleanup() TO service_role;
 CREATE OR REPLACE FUNCTION public.stock_import_create(p_connection_id uuid, p_filename text, p_file_hash text, p_rows jsonb, p_force boolean DEFAULT false)
  RETURNS jsonb
@@ -5905,6 +6029,7 @@ AS $function$
 DECLARE v_uid uuid := auth.uid(); v_ctx record; v_conn uuid; v_user uuid; l record; n int; v_run uuid; v_act record; v_dup record;
   v_cs int; v_ncs int; v_chunks int;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'stock_import_create');
   IF v_uid IS NULL AND COALESCE(auth.role(),'') <> 'service_role' THEN RAISE EXCEPTION 'Niet ingelogd' USING ERRCODE = '42501'; END IF;
   IF NOT public.voorraad_can_write() THEN RETURN jsonb_build_object('ok', false, 'code', 'NO_WRITE_ROLE', 'message', 'Je hebt geen rechten om voorraad te importeren. Vraag een beheerder om een schrijfrol.'); END IF;
   SELECT * INTO v_ctx FROM public.get_active_floriday_context();
@@ -5973,6 +6098,7 @@ EXCEPTION WHEN unique_violation THEN
 END $function$
 ;
 REVOKE ALL ON FUNCTION stock_import_create(uuid,text,text,jsonb,boolean) FROM PUBLIC;
+REVOKE ALL ON FUNCTION stock_import_create(uuid,text,text,jsonb,boolean) FROM anon;
 GRANT EXECUTE ON FUNCTION stock_import_create(uuid,text,text,jsonb,boolean) TO authenticated;
 GRANT EXECUTE ON FUNCTION stock_import_create(uuid,text,text,jsonb,boolean) TO service_role;
 CREATE OR REPLACE FUNCTION public.stock_import_process_chunk(p_run_id uuid, p_chunk_no integer)
@@ -5984,6 +6110,7 @@ AS $function$
 DECLARE v_run record; v_chunk record; v_ctx record; r record; v_pid uuid; v_key text; s record; v_t0 timestamptz := clock_timestamp();
   np int; nm int; ni int; v_fid text; n_ok int := 0; n_err int := 0; v_done int;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'stock_import_process_chunk');
   SELECT * INTO v_run FROM public.stock_import_runs WHERE id = p_run_id FOR UPDATE;
   IF v_run.id IS NULL THEN RAISE EXCEPTION 'Import niet gevonden'; END IF;
   IF NOT public._stock_import_caller(v_run.user_id) THEN RAISE EXCEPTION 'Geen toegang tot deze import' USING ERRCODE = '42501'; END IF;
@@ -6064,6 +6191,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION stock_import_process_chunk(uuid,integer) FROM PUBLIC;
+REVOKE ALL ON FUNCTION stock_import_process_chunk(uuid,integer) FROM anon;
 GRANT EXECUTE ON FUNCTION stock_import_process_chunk(uuid,integer) TO authenticated;
 GRANT EXECUTE ON FUNCTION stock_import_process_chunk(uuid,integer) TO service_role;
 CREATE OR REPLACE FUNCTION public.stock_import_stop(p_run_id uuid)
@@ -6074,6 +6202,7 @@ CREATE OR REPLACE FUNCTION public.stock_import_stop(p_run_id uuid)
 AS $function$
 DECLARE v_run record;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'stock_import_stop');
   SELECT * INTO v_run FROM public.stock_import_runs WHERE id = p_run_id FOR UPDATE;
   IF v_run.id IS NULL THEN RAISE EXCEPTION 'Import niet gevonden'; END IF;
   IF NOT public._stock_import_caller(v_run.user_id) THEN RAISE EXCEPTION 'Geen toegang tot deze import' USING ERRCODE = '42501'; END IF;
@@ -6082,6 +6211,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION stock_import_stop(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION stock_import_stop(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION stock_import_stop(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION stock_import_stop(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.stock_import_undo_chunk(p_run_id uuid, p_chunk_no integer)
@@ -6092,6 +6222,7 @@ CREATE OR REPLACE FUNCTION public.stock_import_undo_chunk(p_run_id uuid, p_chunk
 AS $function$
 DECLARE v_run record; v_chunk record; r record; s record; tp int; tm int; ti int; v_note text; n_back int := 0; n_skip int := 0; v_left int;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'stock_import_undo_chunk');
   SELECT * INTO v_run FROM public.stock_import_runs WHERE id = p_run_id FOR UPDATE;
   IF v_run.id IS NULL THEN RAISE EXCEPTION 'Import niet gevonden'; END IF;
   IF NOT public._stock_import_caller(v_run.user_id) THEN RAISE EXCEPTION 'Geen toegang tot deze import' USING ERRCODE = '42501'; END IF;
@@ -6154,6 +6285,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION stock_import_undo_chunk(uuid,integer) FROM PUBLIC;
+REVOKE ALL ON FUNCTION stock_import_undo_chunk(uuid,integer) FROM anon;
 GRANT EXECUTE ON FUNCTION stock_import_undo_chunk(uuid,integer) TO authenticated;
 GRANT EXECUTE ON FUNCTION stock_import_undo_chunk(uuid,integer) TO service_role;
 CREATE OR REPLACE FUNCTION public.sync_order_item_fusten(_order_item_id uuid)
@@ -6177,6 +6309,7 @@ DECLARE
   v_row record;
   v_user uuid;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'sync_order_item_fusten');
   SELECT oi.*, o.order_number INTO v_item
   FROM logistics_active.order_items oi
   LEFT JOIN public.orders o ON o.id = oi.order_id
@@ -6286,6 +6419,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION sync_order_item_fusten(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION sync_order_item_fusten(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION sync_order_item_fusten(uuid) TO authenticated;
 GRANT EXECUTE ON FUNCTION sync_order_item_fusten(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.sync_products_quantity_from_stock()
@@ -6335,8 +6469,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION sync_products_quantity_from_stock() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION sync_products_quantity_from_stock() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION sync_products_quantity_from_stock() TO anon;
+REVOKE ALL ON FUNCTION sync_products_quantity_from_stock() FROM anon;
+REVOKE EXECUTE ON FUNCTION sync_products_quantity_from_stock() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION sync_products_quantity_from_stock() TO authenticated;
+GRANT EXECUTE ON FUNCTION sync_products_quantity_from_stock() TO service_role;
+REVOKE EXECUTE ON FUNCTION sync_products_quantity_from_stock() FROM anon;
 GRANT EXECUTE ON FUNCTION sync_products_quantity_from_stock() TO authenticated;
 GRANT EXECUTE ON FUNCTION sync_products_quantity_from_stock() TO service_role;
 CREATE OR REPLACE FUNCTION public.touch_fust_types_updated_at()
@@ -6351,8 +6488,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION touch_fust_types_updated_at() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION touch_fust_types_updated_at() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION touch_fust_types_updated_at() TO anon;
+REVOKE ALL ON FUNCTION touch_fust_types_updated_at() FROM anon;
+REVOKE EXECUTE ON FUNCTION touch_fust_types_updated_at() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION touch_fust_types_updated_at() TO authenticated;
+GRANT EXECUTE ON FUNCTION touch_fust_types_updated_at() TO service_role;
+REVOKE EXECUTE ON FUNCTION touch_fust_types_updated_at() FROM anon;
 GRANT EXECUTE ON FUNCTION touch_fust_types_updated_at() TO authenticated;
 GRANT EXECUTE ON FUNCTION touch_fust_types_updated_at() TO service_role;
 CREATE OR REPLACE FUNCTION public.trade_item_drafts_readonly()
@@ -6365,8 +6505,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION trade_item_drafts_readonly() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trade_item_drafts_readonly() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trade_item_drafts_readonly() TO anon;
+REVOKE ALL ON FUNCTION trade_item_drafts_readonly() FROM anon;
+REVOKE EXECUTE ON FUNCTION trade_item_drafts_readonly() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trade_item_drafts_readonly() TO authenticated;
+GRANT EXECUTE ON FUNCTION trade_item_drafts_readonly() TO service_role;
+REVOKE EXECUTE ON FUNCTION trade_item_drafts_readonly() FROM anon;
 GRANT EXECUTE ON FUNCTION trade_item_drafts_readonly() TO authenticated;
 GRANT EXECUTE ON FUNCTION trade_item_drafts_readonly() TO service_role;
 CREATE OR REPLACE FUNCTION public.trade_item_prices_touch_updated_at()
@@ -6381,8 +6524,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION trade_item_prices_touch_updated_at() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trade_item_prices_touch_updated_at() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trade_item_prices_touch_updated_at() TO anon;
+REVOKE ALL ON FUNCTION trade_item_prices_touch_updated_at() FROM anon;
+REVOKE EXECUTE ON FUNCTION trade_item_prices_touch_updated_at() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trade_item_prices_touch_updated_at() TO authenticated;
+GRANT EXECUTE ON FUNCTION trade_item_prices_touch_updated_at() TO service_role;
+REVOKE EXECUTE ON FUNCTION trade_item_prices_touch_updated_at() FROM anon;
 GRANT EXECUTE ON FUNCTION trade_item_prices_touch_updated_at() TO authenticated;
 GRANT EXECUTE ON FUNCTION trade_item_prices_touch_updated_at() TO service_role;
 CREATE OR REPLACE FUNCTION public.trade_item_stock_duplicates()
@@ -6405,8 +6551,11 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION trade_item_stock_duplicates() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trade_item_stock_duplicates() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trade_item_stock_duplicates() TO anon;
+REVOKE ALL ON FUNCTION trade_item_stock_duplicates() FROM anon;
+REVOKE EXECUTE ON FUNCTION trade_item_stock_duplicates() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trade_item_stock_duplicates() TO authenticated;
+GRANT EXECUTE ON FUNCTION trade_item_stock_duplicates() TO service_role;
+REVOKE EXECUTE ON FUNCTION trade_item_stock_duplicates() FROM anon;
 GRANT EXECUTE ON FUNCTION trade_item_stock_duplicates() TO authenticated;
 GRANT EXECUTE ON FUNCTION trade_item_stock_duplicates() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_cart_numbers_sync_order_status_fn()
@@ -6436,8 +6585,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION trg_cart_numbers_sync_order_status_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_cart_numbers_sync_order_status_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_cart_numbers_sync_order_status_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_cart_numbers_sync_order_status_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_cart_numbers_sync_order_status_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_cart_numbers_sync_order_status_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_cart_numbers_sync_order_status_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_cart_numbers_sync_order_status_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_cart_numbers_sync_order_status_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_cart_numbers_sync_order_status_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_cart_session_consume_fn()
@@ -6479,8 +6631,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_cart_session_consume_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_cart_session_consume_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_cart_session_consume_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_cart_session_consume_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_cart_session_consume_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_cart_session_consume_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_cart_session_consume_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_cart_session_consume_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_cart_session_consume_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_cart_session_consume_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_check_product_structure()
@@ -6518,6 +6673,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_check_product_structure() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_check_product_structure() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_check_product_structure() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_floriday_cache_relink_fn()
  RETURNS trigger
@@ -6532,8 +6688,11 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION trg_floriday_cache_relink_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_floriday_cache_relink_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_floriday_cache_relink_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_floriday_cache_relink_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_floriday_cache_relink_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_floriday_cache_relink_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_floriday_cache_relink_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_floriday_cache_relink_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_floriday_cache_relink_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_floriday_cache_relink_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_floriday_trade_items_autolink_fn()
@@ -6564,8 +6723,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_floriday_trade_items_autolink_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_floriday_trade_items_autolink_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_floriday_trade_items_autolink_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_floriday_trade_items_autolink_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_floriday_trade_items_autolink_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_floriday_trade_items_autolink_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_floriday_trade_items_autolink_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_floriday_trade_items_autolink_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_floriday_trade_items_autolink_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_floriday_trade_items_autolink_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_order_items_autolink_fn()
@@ -6584,8 +6746,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_order_items_autolink_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_order_items_autolink_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_order_items_autolink_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_order_items_autolink_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_order_items_autolink_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_order_items_autolink_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_order_items_autolink_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_order_items_autolink_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_order_items_autolink_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_order_items_autolink_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_order_items_fusten()
@@ -6606,6 +6771,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION trg_order_items_fusten() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_order_items_fusten() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_order_items_fusten() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_order_items_reserve_fn()
  RETURNS trigger
@@ -6642,8 +6808,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_order_items_reserve_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_order_items_reserve_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_order_items_reserve_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_order_items_reserve_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_order_items_reserve_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_order_items_reserve_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_order_items_reserve_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_order_items_reserve_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_order_items_reserve_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_order_items_reserve_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_orders_cancel_release_fn()
@@ -6667,8 +6836,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_orders_cancel_release_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_orders_cancel_release_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_orders_cancel_release_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_orders_cancel_release_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_orders_cancel_release_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_orders_cancel_release_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_orders_cancel_release_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_orders_cancel_release_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_orders_cancel_release_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_orders_cancel_release_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_orders_consume_on_complete_fn()
@@ -6710,8 +6882,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_orders_consume_on_complete_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_orders_consume_on_complete_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_orders_consume_on_complete_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_orders_consume_on_complete_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_orders_consume_on_complete_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_orders_consume_on_complete_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_orders_consume_on_complete_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_orders_consume_on_complete_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_orders_consume_on_complete_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_orders_consume_on_complete_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_orders_default_phase_fn()
@@ -6727,8 +6902,11 @@ BEGIN
 END; $function$
 ;
 REVOKE ALL ON FUNCTION trg_orders_default_phase_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_orders_default_phase_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_orders_default_phase_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_orders_default_phase_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_orders_default_phase_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_orders_default_phase_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_orders_default_phase_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_orders_default_phase_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_orders_default_phase_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_orders_default_phase_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_orders_external_fulfilled_fn()
@@ -6751,6 +6929,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_orders_external_fulfilled_fn() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_orders_external_fulfilled_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_orders_external_fulfilled_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_orders_recompute_reserved_fn()
  RETURNS trigger
@@ -6768,8 +6947,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_orders_recompute_reserved_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_orders_recompute_reserved_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_orders_recompute_reserved_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_orders_recompute_reserved_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_orders_recompute_reserved_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_orders_recompute_reserved_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_orders_recompute_reserved_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_orders_recompute_reserved_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_orders_recompute_reserved_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_orders_recompute_reserved_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_pgi_assign_sort_order()
@@ -6788,6 +6970,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_pgi_assign_sort_order() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_pgi_assign_sort_order() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_pgi_assign_sort_order() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_pgi_order_taken_check()
  RETURNS trigger
@@ -6813,6 +6996,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_pgi_order_taken_check() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_pgi_order_taken_check() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_pgi_order_taken_check() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_process_recompute_on_commit()
  RETURNS trigger
@@ -6847,6 +7031,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_process_recompute_on_commit() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_process_recompute_on_commit() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_process_recompute_on_commit() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_product_packings_derive_fn()
  RETURNS trigger
@@ -6863,6 +7048,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_product_packings_derive_fn() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_product_packings_derive_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_product_packings_derive_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_products_autolink_fn()
  RETURNS trigger
@@ -6878,8 +7064,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_products_autolink_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_products_autolink_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_products_autolink_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_products_autolink_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_products_autolink_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_products_autolink_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_products_autolink_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_products_autolink_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_products_autolink_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_products_autolink_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_products_floriday_link_enqueue()
@@ -6925,6 +7114,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_products_floriday_link_enqueue() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_products_floriday_link_enqueue() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_products_floriday_link_enqueue() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_products_seed_stock_fn()
  RETURNS trigger
@@ -6940,8 +7130,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_products_seed_stock_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_products_seed_stock_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_products_seed_stock_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_products_seed_stock_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_products_seed_stock_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_products_seed_stock_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_products_seed_stock_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_products_seed_stock_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_products_seed_stock_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_products_seed_stock_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_requeue_no_warehouse_cache()
@@ -6959,6 +7152,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_requeue_no_warehouse_cache() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_requeue_no_warehouse_cache() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_requeue_no_warehouse_cache() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_requeue_no_warehouse_connection()
  RETURNS trigger
@@ -6974,6 +7168,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_requeue_no_warehouse_connection() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_requeue_no_warehouse_connection() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_requeue_no_warehouse_connection() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_requeue_no_warehouse_item_pref()
  RETURNS trigger
@@ -6989,6 +7184,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_requeue_no_warehouse_item_pref() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_requeue_no_warehouse_item_pref() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_requeue_no_warehouse_item_pref() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_requeue_skipped_no_price()
  RETURNS trigger
@@ -7028,6 +7224,7 @@ EXCEPTION WHEN OTHERS THEN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_requeue_skipped_no_price() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_requeue_skipped_no_price() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_requeue_skipped_no_price() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_stock_structure_recompute_ins()
  RETURNS trigger
@@ -7048,6 +7245,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_stock_structure_recompute_ins() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_stock_structure_recompute_ins() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_stock_structure_recompute_ins() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_stock_structure_recompute_upd()
  RETURNS trigger
@@ -7071,6 +7269,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_stock_structure_recompute_upd() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_stock_structure_recompute_upd() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_stock_structure_recompute_upd() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_structure_change_recompute()
  RETURNS trigger
@@ -7106,6 +7305,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_structure_change_recompute() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_structure_change_recompute() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_structure_change_recompute() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_trade_item_drafts_autolink_fn()
  RETURNS trigger
@@ -7137,8 +7337,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_trade_item_drafts_autolink_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_trade_item_drafts_autolink_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_trade_item_drafts_autolink_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_trade_item_drafts_autolink_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_trade_item_drafts_autolink_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_trade_item_drafts_autolink_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_trade_item_drafts_autolink_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_trade_item_drafts_autolink_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_trade_item_drafts_autolink_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_trade_item_drafts_autolink_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_trade_item_stock_auto_bom()
@@ -7210,6 +7413,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION trg_trade_item_stock_auto_bom() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_trade_item_stock_auto_bom() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_trade_item_stock_auto_bom() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_trade_item_stock_auto_bom_reverse()
  RETURNS trigger
@@ -7282,6 +7486,7 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION trg_trade_item_stock_auto_bom_reverse() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_trade_item_stock_auto_bom_reverse() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_trade_item_stock_auto_bom_reverse() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_trade_item_stock_log_change()
  RETURNS trigger
@@ -7355,6 +7560,7 @@ EXCEPTION WHEN others THEN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_trade_item_stock_log_change() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_trade_item_stock_log_change() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_trade_item_stock_log_change() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_trade_item_stock_reserve_fn()
  RETURNS trigger
@@ -7368,8 +7574,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_trade_item_stock_reserve_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_trade_item_stock_reserve_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_trade_item_stock_reserve_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_trade_item_stock_reserve_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_trade_item_stock_reserve_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_trade_item_stock_reserve_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_trade_item_stock_reserve_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_trade_item_stock_reserve_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_trade_item_stock_reserve_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_trade_item_stock_reserve_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_trade_item_stock_zero_watch()
@@ -7422,6 +7631,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_trade_item_stock_zero_watch() FROM PUBLIC;
+REVOKE ALL ON FUNCTION trg_trade_item_stock_zero_watch() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_trade_item_stock_zero_watch() TO service_role;
 CREATE OR REPLACE FUNCTION public.trg_trade_items_cache_autolink_fn()
  RETURNS trigger
@@ -7451,8 +7661,11 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION trg_trade_items_cache_autolink_fn() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_trade_items_cache_autolink_fn() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION trg_trade_items_cache_autolink_fn() TO anon;
+REVOKE ALL ON FUNCTION trg_trade_items_cache_autolink_fn() FROM anon;
+REVOKE EXECUTE ON FUNCTION trg_trade_items_cache_autolink_fn() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION trg_trade_items_cache_autolink_fn() TO authenticated;
+GRANT EXECUTE ON FUNCTION trg_trade_items_cache_autolink_fn() TO service_role;
+REVOKE EXECUTE ON FUNCTION trg_trade_items_cache_autolink_fn() FROM anon;
 GRANT EXECUTE ON FUNCTION trg_trade_items_cache_autolink_fn() TO authenticated;
 GRANT EXECUTE ON FUNCTION trg_trade_items_cache_autolink_fn() TO service_role;
 CREATE OR REPLACE FUNCTION public.update_updated_at_column()
@@ -7462,7 +7675,8 @@ CREATE OR REPLACE FUNCTION public.update_updated_at_column()
 AS $function$ BEGIN NEW.updated_at = now(); RETURN NEW; END; $function$
 ;
 REVOKE ALL ON FUNCTION update_updated_at_column() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION update_updated_at_column() TO anon;
+REVOKE ALL ON FUNCTION update_updated_at_column() FROM anon;
+REVOKE EXECUTE ON FUNCTION update_updated_at_column() FROM anon;
 GRANT EXECUTE ON FUNCTION update_updated_at_column() TO authenticated;
 GRANT EXECUTE ON FUNCTION update_updated_at_column() TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_alert_floriday_not_updated(p_key text, p_qty numeric, p_order_id uuid, p_order_item_id uuid)
@@ -7473,6 +7687,7 @@ CREATE OR REPLACE FUNCTION public.voorraad_alert_floriday_not_updated(p_key text
 AS $function$
 DECLARE v_code text; v_name text; v_nr text; v_tx bigint := -(txid_current() + 1125899906842624);
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'voorraad_alert_floriday_not_updated');
   SELECT p.article_number, p.product INTO v_code, v_name FROM public.products p
    WHERE lower(p.floriday_trade_item_id) = lower(p_key) OR p.trade_item_key = p_key OR 'product:' || p.id::text = p_key OR p.id::text = p_key
    LIMIT 1;
@@ -7488,6 +7703,7 @@ EXCEPTION WHEN others THEN RAISE WARNING '[floriday-not-updated-alert] %', SQLER
 END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_alert_floriday_not_updated(text,numeric,uuid,uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_alert_floriday_not_updated(text,numeric,uuid,uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_alert_floriday_not_updated(text,numeric,uuid,uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_can_write()
  RETURNS boolean
@@ -7505,6 +7721,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_can_write() FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_can_write() FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_can_write() TO authenticated;
 GRANT EXECUTE ON FUNCTION voorraad_can_write() TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_cleanup_old_rows()
@@ -7518,6 +7735,7 @@ declare
   v_dead int := 0;
   v_sent int := 0;
 begin
+  PERFORM public.voorraad_vereis('server', 'voorraad_cleanup_old_rows');
   delete from public.floriday_continuous_stock_queue
    where status = 'superseded'
      and created_at < now() - interval '2 days';
@@ -7542,6 +7760,7 @@ end;
 $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_cleanup_old_rows() FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_cleanup_old_rows() FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_cleanup_old_rows() TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_consume_external_fulfilled(p_order_id uuid, p_ids text[], p_source text)
  RETURNS integer
@@ -7551,6 +7770,7 @@ CREATE OR REPLACE FUNCTION public.voorraad_consume_external_fulfilled(p_order_id
 AS $function$
 DECLARE oi record; n integer := 0; v_norm text := public.normalize_order_source(COALESCE(p_source,'HO'));
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'voorraad_consume_external_fulfilled');
   IF p_order_id IS NULL OR COALESCE(array_length(p_ids,1),0) = 0 THEN RETURN 0; END IF;
   FOR oi IN SELECT id, source_line_key, quantity FROM logistics_active.order_items WHERE order_id = p_order_id LOOP
     IF oi.source_line_key IS NOT NULL AND oi.source_line_key = ANY(p_ids) THEN
@@ -7568,7 +7788,184 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_consume_external_fulfilled(uuid,text[],text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_consume_external_fulfilled(uuid,text[],text) FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_consume_external_fulfilled(uuid,text[],text) TO service_role;
+CREATE OR REPLACE FUNCTION public.voorraad_correctie_1098(p_uitvoeren boolean DEFAULT false)
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ SECURITY DEFINER
+ SET search_path TO 'public'
+AS $function$
+DECLARE
+  v_cache_n bigint; v_cache_h text; v_queue_n bigint; v_queue_h text;
+  v_hash_ok boolean := NULL;
+  v_ins int := 0; v_upd int := 0; v_art int := 0; v_meld int := 0; v_prod int := 0;
+  v_ex_ins jsonb := '[]'; v_ex_upd jsonb := '[]'; v_ex_art jsonb := '[]'; v_ex_meld jsonb := '[]';
+  v_door text; r record; e record; v_res jsonb;
+BEGIN
+  IF NOT public.voorraad_is_server() THEN
+    RAISE EXCEPTION 'Alleen de server mag deze correctie uitvoeren' USING ERRCODE = '42501';
+  END IF;
+  PERFORM set_config('stock.change_source', 'CORRECTIE_1098', true);
+  v_door := COALESCE(auth.uid()::text, 'systeem:' || session_user::text);
+  IF p_uitvoeren THEN
+    SELECT count(*), md5(coalesce(string_agg(t::text, '|' ORDER BY t::text), '')) INTO v_cache_n, v_cache_h FROM public.floriday_trade_items_cache t;
+    SELECT count(*), md5(coalesce(string_agg(q::text, '|' ORDER BY q::text), '')) INTO v_queue_n, v_queue_h FROM public.floriday_continuous_stock_queue q;
+  END IF;
+  FOR r IN
+    SELECT p.id, p.article_number, p.plants_per_crate, p.crates_per_layer, p.layers_per_cart,
+           c.connection_id, c.data->'packingConfigurations' AS cfg
+      FROM public.products p
+      JOIN public.floriday_trade_items_cache c
+        ON c.floriday_id = NULLIF(btrim(p.floriday_trade_item_id), '')
+       AND COALESCE(c.is_deleted, false) = false
+     ORDER BY p.id
+  LOOP
+    v_prod := v_prod + 1;
+    -- Twijfel = overslaan en melden. Sleutel per verpakking: Floriday-id, of zonder id het volgnummer in Floriday (product_id + volgnr).
+    IF jsonb_typeof(r.cfg) IS DISTINCT FROM 'array' OR jsonb_array_length(r.cfg) = 0 THEN
+      v_meld := v_meld + 1; IF jsonb_array_length(v_ex_meld) < 5 THEN v_ex_meld := v_ex_meld || jsonb_build_object('product_id', r.id, 'artikelcode', r.article_number, 'reden', 'geen verpakkingen in Floriday'); END IF; CONTINUE;
+    END IF;
+    IF (SELECT count(*) FROM public.floriday_trade_items_cache c2 WHERE c2.floriday_id = (SELECT NULLIF(btrim(floriday_trade_item_id),'') FROM public.products WHERE id = r.id) AND COALESCE(c2.is_deleted,false) = false) > 1 THEN
+      v_meld := v_meld + 1; IF jsonb_array_length(v_ex_meld) < 5 THEN v_ex_meld := v_ex_meld || jsonb_build_object('product_id', r.id, 'artikelcode', r.article_number, 'reden', 'in meer dan één koppeling'); END IF; CONTINUE;
+    END IF;
+    IF (SELECT count(*) FROM jsonb_array_elements(r.cfg) x WHERE COALESCE((x->>'primary')::boolean, false)) <> 1 THEN
+      v_meld := v_meld + 1; IF jsonb_array_length(v_ex_meld) < 5 THEN v_ex_meld := v_ex_meld || jsonb_build_object('product_id', r.id, 'artikelcode', r.article_number, 'reden', 'niet precies één primaire'); END IF; CONTINUE;
+    END IF;
+    IF EXISTS (SELECT 1 FROM jsonb_array_elements(r.cfg) x
+                WHERE COALESCE(x->>'piecesPerPackage','') !~ '^[1-9][0-9]*$'
+                   OR COALESCE(x->>'packagesPerLayer','') !~ '^[1-9][0-9]*$'
+                   OR COALESCE(x->>'layersPerLoadCarrier','') !~ '^[1-9][0-9]*$'
+                   OR (x#>>'{package,vbnPackageCode}' IS NOT NULL AND x#>>'{package,vbnPackageCode}' !~ '^[0-9]+$'))
+       OR (SELECT count(DISTINCT COALESCE(NULLIF(x->>'packingConfigurationId',''), NULLIF(x->>'id',''), '#' || o)) FROM jsonb_array_elements(r.cfg) WITH ORDINALITY t(x, o)) <> jsonb_array_length(r.cfg) THEN
+      v_meld := v_meld + 1; IF jsonb_array_length(v_ex_meld) < 5 THEN v_ex_meld := v_ex_meld || jsonb_build_object('product_id', r.id, 'artikelcode', r.article_number, 'reden', 'veld ontbreekt of ongeldig'); END IF; CONTINUE;
+    END IF;
+    IF EXISTS (SELECT 1 FROM public.product_packings pp WHERE pp.product_id = r.id
+                AND COALESCE(pp.floriday_packing_id, '#' || pp.sort_order) NOT IN
+                     (SELECT COALESCE(NULLIF(x->>'packingConfigurationId',''), NULLIF(x->>'id',''), '#' || o) FROM jsonb_array_elements(r.cfg) WITH ORDINALITY t(x, o)))
+       OR EXISTS (SELECT 1 FROM public.product_packings pp WHERE pp.product_id = r.id
+                  GROUP BY COALESCE(pp.floriday_packing_id, '#' || pp.sort_order) HAVING count(*) > 1) THEN
+      v_meld := v_meld + 1; IF jsonb_array_length(v_ex_meld) < 5 THEN v_ex_meld := v_ex_meld || jsonb_build_object('product_id', r.id, 'artikelcode', r.article_number, 'reden', 'lokale verpakking niet in Floriday (blijft staan)'); END IF; CONTINUE;
+    END IF;
+    SELECT x INTO e FROM jsonb_array_elements(r.cfg) x WHERE COALESCE((x->>'primary')::boolean, false);
+    IF (r.plants_per_crate, r.crates_per_layer, r.layers_per_cart) IS DISTINCT FROM
+       ((e.x->>'piecesPerPackage')::int, (e.x->>'packagesPerLayer')::int, (e.x->>'layersPerLoadCarrier')::int) THEN
+      v_art := v_art + 1;
+      IF jsonb_array_length(v_ex_art) < 5 THEN
+        v_ex_art := v_ex_art || jsonb_build_object('product_id', r.id, 'artikelcode', r.article_number,
+          'oud', concat_ws('/', r.plants_per_crate, r.crates_per_layer, r.layers_per_cart),
+          'nieuw', concat_ws('/', e.x->>'piecesPerPackage', e.x->>'packagesPerLayer', e.x->>'layersPerLoadCarrier'));
+      END IF;
+    END IF;
+    FOR e IN
+      SELECT n.*, pp.id AS pp_id, to_jsonb(pp) AS pp_row
+        FROM (
+          SELECT o AS sort_order,
+                 NULLIF(COALESCE(NULLIF(x->>'packingConfigurationId',''), x->>'id'), '') AS fpid,
+                 COALESCE(NULLIF(x->>'packingConfigurationId',''), NULLIF(x->>'id',''), '#' || o) AS k,
+                 (x#>>'{package,vbnPackageCode}')::int AS vbn,
+                 x#>>'{package,customPackageId}' AS cpid,
+                 (SELECT f.id FROM public.fust_types f WHERE f.connection_id IS NULL AND f.vbn_code IS NOT NULL
+                     AND f.vbn_code::text = x#>>'{package,vbnPackageCode}' ORDER BY f.id LIMIT 1) AS fust,
+                 x->>'loadCarrier' AS lc,
+                 (x->>'piecesPerPackage')::int AS pcs,
+                 (x->>'packagesPerLayer')::int AS ppl,
+                 (x->>'layersPerLoadCarrier')::int AS lay,
+                 COALESCE((x->>'primary')::boolean, false) AS prim,
+                 COALESCE(ARRAY(SELECT jsonb_array_elements_text(CASE WHEN jsonb_typeof(x->'allowedCustomerOrganizationIds') = 'array' THEN x->'allowedCustomerOrganizationIds' ELSE '[]'::jsonb END)), '{}'::text[]) AS cust
+            FROM jsonb_array_elements(r.cfg) WITH ORDINALITY t(x, o)
+        ) n
+        LEFT JOIN public.product_packings pp ON pp.product_id = r.id AND COALESCE(pp.floriday_packing_id, '#' || pp.sort_order) = n.k
+       ORDER BY n.prim, n.sort_order
+    LOOP
+      IF e.pp_id IS NULL THEN
+        v_ins := v_ins + 1;
+        IF jsonb_array_length(v_ex_ins) < 5 THEN
+          v_ex_ins := v_ex_ins || jsonb_build_object('product_id', r.id, 'artikelcode', r.article_number, 'floriday_packing_id', e.fpid, 'volgnr', e.sort_order,
+            'nieuw', concat_ws('/', e.pcs, e.ppl, e.lay) || CASE WHEN e.prim THEN ' (primair)' ELSE '' END);
+        END IF;
+        IF p_uitvoeren THEN
+          INSERT INTO public.product_packings(product_id, source, floriday_packing_id, vbn_package_code, custom_package_id, fust_type_id,
+                 load_carrier, pieces_per_package, packages_per_layer, layers_per_load_carrier, is_primary, customer_organization_ids, sort_order)
+          VALUES (r.id, 'floriday', e.fpid, e.vbn, e.cpid, e.fust, e.lc, e.pcs, e.ppl, e.lay, e.prim, e.cust, e.sort_order);
+        END IF;
+      ELSIF (e.pp_row->>'source', (e.pp_row->>'vbn_package_code')::int, e.pp_row->>'custom_package_id', (e.pp_row->>'fust_type_id')::uuid,
+             e.pp_row->>'load_carrier', (e.pp_row->>'pieces_per_package')::int, (e.pp_row->>'packages_per_layer')::int,
+             (e.pp_row->>'layers_per_load_carrier')::int, (e.pp_row->>'is_primary')::boolean,
+             ARRAY(SELECT jsonb_array_elements_text(e.pp_row->'customer_organization_ids')), (e.pp_row->>'sort_order')::int)
+            IS DISTINCT FROM ('floriday', e.vbn, e.cpid, e.fust, e.lc, e.pcs, e.ppl, e.lay, e.prim, e.cust, e.sort_order::int) THEN
+        v_upd := v_upd + 1;
+        IF jsonb_array_length(v_ex_upd) < 5 THEN
+          v_ex_upd := v_ex_upd || jsonb_build_object('id', e.pp_id, 'product_id', r.id, 'artikelcode', r.article_number,
+            'oud', concat_ws('/', e.pp_row->>'pieces_per_package', e.pp_row->>'packages_per_layer', e.pp_row->>'layers_per_load_carrier'),
+            'nieuw', concat_ws('/', e.pcs, e.ppl, e.lay));
+        END IF;
+        IF p_uitvoeren THEN
+          UPDATE public.product_packings SET source = 'floriday', vbn_package_code = e.vbn, custom_package_id = e.cpid,
+                 fust_type_id = e.fust, load_carrier = e.lc, pieces_per_package = e.pcs, packages_per_layer = e.ppl,
+                 layers_per_load_carrier = e.lay, is_primary = e.prim, customer_organization_ids = e.cust,
+                 sort_order = e.sort_order, updated_at = now()
+           WHERE id = e.pp_id;
+        END IF;
+      END IF;
+    END LOOP;
+  END LOOP;
+  IF p_uitvoeren THEN
+    v_hash_ok := v_cache_n = (SELECT count(*) FROM public.floriday_trade_items_cache)
+      AND v_cache_h = (SELECT md5(coalesce(string_agg(t::text, '|' ORDER BY t::text), '')) FROM public.floriday_trade_items_cache t)
+      AND v_queue_n = (SELECT count(*) FROM public.floriday_continuous_stock_queue)
+      AND v_queue_h = (SELECT md5(coalesce(string_agg(q::text, '|' ORDER BY q::text), '')) FROM public.floriday_continuous_stock_queue q);
+    IF NOT v_hash_ok THEN
+      RAISE EXCEPTION 'Floriday-kopie of wachtrij is gewijzigd; alles teruggedraaid' USING ERRCODE = 'P0001';
+    END IF;
+  END IF;
+  v_res := jsonb_build_object(
+    'uitgevoerd', p_uitvoeren,
+    'artikelen_bekeken', v_prod,
+    'toevoegen', jsonb_build_object('aantal', v_ins, 'voorbeelden', v_ex_ins),
+    'bijwerken', jsonb_build_object('aantal', v_upd, 'voorbeelden', v_ex_upd),
+    'artikelvelden', jsonb_build_object('aantal', v_art, 'voorbeelden', v_ex_art),
+    'meldingen', jsonb_build_object('aantal', v_meld, 'voorbeelden', v_ex_meld),
+    'floriday_kopie_en_wachtrij_ongewijzigd', v_hash_ok);
+  INSERT INTO public.voorraad_correcties(correctie, uitgevoerd_door, proef, aantallen, hash_ok)
+  VALUES ('1098', v_door, NOT p_uitvoeren, v_res - '{toevoegen,bijwerken,artikelvelden,meldingen}'::text[]
+          || jsonb_build_object('toevoegen', v_ins, 'bijwerken', v_upd, 'artikelvelden', v_art, 'meldingen', v_meld), v_hash_ok);
+  RETURN v_res;
+END $function$
+;
+REVOKE ALL ON FUNCTION voorraad_correctie_1098(boolean) FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_correctie_1098(boolean) FROM anon;
+GRANT EXECUTE ON FUNCTION voorraad_correctie_1098(boolean) TO authenticated;
+GRANT EXECUTE ON FUNCTION voorraad_correctie_1098(boolean) TO service_role;
+CREATE OR REPLACE FUNCTION public.voorraad_correctie_status(p_correctie text DEFAULT '1098'::text)
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
+AS $function$
+DECLARE r record;
+BEGIN
+  IF NOT (public.voorraad_is_server() OR auth.uid() IS NOT NULL) THEN
+    RAISE EXCEPTION 'Niet ingelogd' USING ERRCODE = '42501';
+  END IF;
+  SELECT * INTO r FROM public.voorraad_correcties
+   WHERE correctie = p_correctie AND NOT proef AND hash_ok IS TRUE
+   ORDER BY uitgevoerd_op DESC LIMIT 1;
+  IF NOT FOUND THEN RETURN jsonb_build_object('correctie', p_correctie, 'uitgevoerd', false); END IF;
+  RETURN jsonb_build_object('correctie', p_correctie, 'uitgevoerd', true, 'laatst_op', r.uitgevoerd_op,
+                            'door', r.uitgevoerd_door, 'aantallen', r.aantallen);
+END $function$
+;
+REVOKE ALL ON FUNCTION voorraad_correctie_status(text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_correctie_status(text) FROM anon;
+GRANT EXECUTE ON FUNCTION voorraad_correctie_status(text) TO authenticated;
+GRANT EXECUTE ON FUNCTION voorraad_correctie_status(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_external_fulfilled_ids(p_cf jsonb)
  RETURNS text[]
  LANGUAGE sql
@@ -7581,8 +7978,11 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_external_fulfilled_ids(jsonb) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION voorraad_external_fulfilled_ids(jsonb) TO PUBLIC;
-GRANT EXECUTE ON FUNCTION voorraad_external_fulfilled_ids(jsonb) TO anon;
+REVOKE ALL ON FUNCTION voorraad_external_fulfilled_ids(jsonb) FROM anon;
+REVOKE EXECUTE ON FUNCTION voorraad_external_fulfilled_ids(jsonb) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION voorraad_external_fulfilled_ids(jsonb) TO authenticated;
+GRANT EXECUTE ON FUNCTION voorraad_external_fulfilled_ids(jsonb) TO service_role;
+REVOKE EXECUTE ON FUNCTION voorraad_external_fulfilled_ids(jsonb) FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_external_fulfilled_ids(jsonb) TO authenticated;
 GRANT EXECUTE ON FUNCTION voorraad_external_fulfilled_ids(jsonb) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_floriday_leads_key(p_key text)
@@ -7601,6 +8001,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_floriday_leads_key(text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_floriday_leads_key(text) FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_floriday_leads_key(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_hook_base_url()
  RETURNS text
@@ -7610,6 +8011,7 @@ CREATE OR REPLACE FUNCTION public.voorraad_hook_base_url()
 AS $function$
 DECLARE v_target text; v_shell text; v_old text; v_probe text; v_last text; v_status int;
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'voorraad_hook_base_url');
   SELECT value INTO v_target FROM module_runtime_config WHERE key = 'voorraad_hook_target';
   SELECT NULLIF(rtrim(value,'/'),'') INTO v_shell FROM module_runtime_config WHERE key = 'shell_base_url';
   SELECT NULLIF(rtrim(value,'/'),'') INTO v_old FROM module_runtime_config WHERE key = 'voorraad_base_url';
@@ -7640,6 +8042,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_hook_base_url() FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_hook_base_url() FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_hook_base_url() TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_hook_on(p_name text)
  RETURNS boolean
@@ -7653,6 +8056,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_hook_on(text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_hook_on(text) FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_hook_on(text) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_hook_post(p_path text, p_timeout integer DEFAULT 5000)
  RETURNS void
@@ -7662,6 +8066,7 @@ CREATE OR REPLACE FUNCTION public.voorraad_hook_post(p_path text, p_timeout inte
 AS $function$
 DECLARE v_base text; v_key text;
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'voorraad_hook_post');
   v_base := public.voorraad_hook_base_url();
   SELECT value INTO v_key FROM module_runtime_config WHERE key = 'voorraad_hook_apikey';
   IF COALESCE(v_base,'') = '' OR COALESCE(v_key,'') = '' THEN
@@ -7674,6 +8079,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_hook_post(text,integer) FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_hook_post(text,integer) FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_hook_post(text,integer) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_hook_switch_jobs()
  RETURNS trigger
@@ -7706,7 +8112,76 @@ EXCEPTION WHEN OTHERS THEN
 END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_hook_switch_jobs() FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_hook_switch_jobs() FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_hook_switch_jobs() TO service_role;
+CREATE OR REPLACE FUNCTION public.voorraad_install_check()
+ RETURNS jsonb
+ LANGUAGE plpgsql
+ STABLE SECURITY DEFINER
+ SET search_path TO 'public'
+AS $function$
+DECLARE v_f text[] := ARRAY['_floriday_queue_cleanup_batch','_migrate_rewrite_stock_key','_stock_import_caller','apply_fust_stock_mutation','apply_stock_consumption','apply_stock_reservation','autolink_product_to_floriday','backfill_open_order_reservations','calculate_floriday_desired_stock','calculate_structure_available','canonicalize_trade_item_stock_key','check_product_structure','claim_floriday_base_supply','claim_floriday_stock_queue','cleanup_floriday_stock_queue','cleanup_voorraad_module_history','complete_floriday_base_supply','complete_floriday_stock_queue','complete_floriday_stock_queue_outcome','consume_bom_for_production','consume_order_item','drain_inventory_recompute_queue','enqueue_floriday_continuous_stock','enqueue_floriday_continuous_stock_after_warehouse_preference','enqueue_structure_recompute','ensure_inventory_recompute_drain','ensure_trade_item_stock_row','ensure_trade_item_stock_row_key','fcsq_block_disabled','fcsq_fallback_supersede','fcsq_wake_base_supply','find_trade_item_key','floriday_adopt_connection','floriday_autoheal_connections','floriday_capture_stock_snapshot','floriday_cleanup_stock_queue_v2','floriday_compact_stock_snapshots','floriday_default_owner','floriday_desired_stock_regression_check','floriday_ensure_inventory_settings','floriday_erp_leading_preview','floriday_fill_publish_horizon','floriday_follow_apply','floriday_ingest_sales_orders','floriday_leading_summary','floriday_make_erp_leading','floriday_norm_offer_forms','floriday_orphan_settings_count','floriday_publish_horizon_weeks','floriday_queue_erp_guard','floriday_queue_first_positive','floriday_recompute_inventory','floriday_relink_products','floriday_requeue_dead_letters','floriday_settings_change_recompute','floriday_settings_change_recompute_stmt','floriday_stock_change_recompute','floriday_stock_queue_supersede','floriday_takeover_apply','floriday_takeover_fetch_state','floriday_takeover_store_forms','floriday_takeover_undo','fust_negative_stock_report','fust_types_duplicate_guard','get_active_floriday_context','get_group_allocation_keys','get_group_head_key','get_product_stock','get_product_structure_totals','get_product_structure_totals_batch','inventory_inline_budget_ok','merge_products','normalize_order_source','process_inventory_recompute_queue','produce_designed_product','product_active_group_id','product_id_from_ref','product_is_set','product_label','product_member_group_ids','product_own_available','product_packings_derive','product_packings_replace','product_packings_sync_from_floriday','product_primary_pieces','product_set_depth_above','product_set_depth_below','product_structure_ancestors','product_structure_max_depth','product_structure_path','product_tray_stickers_touch','product_type','promote_trade_item_key','recompute_all_reserved_stock','recompute_order_status','recompute_reserved_for_order','recompute_reserved_stock','requeue_skipped_stock_rows','reset_stalled_floriday_stock_queue','resolve_group_allocation','resolve_group_member_stock_key','resolve_product_id_for_item','resolve_stock_trade_item_key','reverse_production','run_floriday_base_supply_process','run_floriday_continuous_stock_sync','run_floriday_follow','run_floriday_stock_queue_process','run_floriday_stock_reconcile','run_logistics_tasks_dispatch','self_heal_floriday_links','set_module_runtime_config_updated_at','set_product_bom_tenant','set_product_stock','set_updated_at_order_fust_bookings','stock_import_cleanup','stock_import_create','stock_import_process_chunk','stock_import_stop','stock_import_undo_chunk','sync_order_item_fusten','sync_products_quantity_from_stock','touch_fust_types_updated_at','trade_item_drafts_readonly','trade_item_prices_touch_updated_at','trade_item_stock_duplicates','trg_cart_numbers_sync_order_status_fn','trg_cart_session_consume_fn','trg_check_product_structure','trg_floriday_cache_relink_fn','trg_floriday_trade_items_autolink_fn','trg_order_items_autolink_fn','trg_order_items_fusten','trg_order_items_reserve_fn','trg_orders_cancel_release_fn','trg_orders_consume_on_complete_fn','trg_orders_default_phase_fn','trg_orders_external_fulfilled_fn','trg_orders_recompute_reserved_fn','trg_pgi_assign_sort_order','trg_pgi_order_taken_check','trg_process_recompute_on_commit','trg_product_packings_derive_fn','trg_products_autolink_fn','trg_products_floriday_link_enqueue','trg_products_seed_stock_fn','trg_requeue_no_warehouse_cache','trg_requeue_no_warehouse_connection','trg_requeue_no_warehouse_item_pref','trg_requeue_skipped_no_price','trg_stock_structure_recompute_ins','trg_stock_structure_recompute_upd','trg_structure_change_recompute','trg_trade_item_drafts_autolink_fn','trg_trade_item_stock_auto_bom','trg_trade_item_stock_auto_bom_reverse','trg_trade_item_stock_log_change','trg_trade_item_stock_reserve_fn','trg_trade_item_stock_zero_watch','trg_trade_items_cache_autolink_fn','update_updated_at_column','voorraad_alert_floriday_not_updated','voorraad_can_write','voorraad_cleanup_old_rows','voorraad_consume_external_fulfilled','voorraad_correctie_1098','voorraad_correctie_status','voorraad_external_fulfilled_ids','voorraad_floriday_leads_key','voorraad_hook_base_url','voorraad_hook_on','voorraad_hook_post','voorraad_hook_switch_jobs','voorraad_install_check','voorraad_is_server','voorraad_mark_floriday_sold_before_switch','voorraad_production_enabled','voorraad_schema_ddl','voorraad_touch_updated_at','voorraad_vereis','voorraad_week_is_past'];
+  v_t text[] := ARRAY['aa_fcsq_erp_leading_guard@floriday_continuous_stock_queue','aa_fis_norm_offer_forms@floriday_inventory_settings','aa_pgi_assign_sort_order@product_group_items','fcsq_block_disabled@floriday_continuous_stock_queue','fcsq_wake_base_supply_ins@floriday_continuous_stock_queue','fcsq_wake_base_supply_upd@floriday_continuous_stock_queue','fust_stock_mutations_apply@fust_stock_mutations','fust_types_duplicate_guard@fust_types','fust_types_touch@fust_types','product_packings_derive_trg@product_packings','product_packings_updated_at@product_packings','set_product_bom_tenant_trigger@product_bom_items','trade_item_prices_set_updated_at@trade_item_prices','trg_cart_numbers_sync_order_status@cart_numbers','trg_cart_session_consume@cart_control_sessions','trg_check_product_structure@product_bom_items','trg_check_product_structure@product_group_items','trg_check_product_structure@product_groups','trg_fcs_queue_updated_at@floriday_continuous_stock_queue','trg_fcsq_fallback_supersede@floriday_continuous_stock_queue','trg_fcsq_supersede@floriday_continuous_stock_queue','trg_floriday_cache_relink@floriday_trade_items_cache','trg_floriday_ensure_inventory_settings@products','trg_floriday_gate_stock_queue@floriday_continuous_stock_queue','trg_floriday_settings_change_recompute_ins@floriday_inventory_settings','trg_floriday_settings_change_recompute_upd@floriday_inventory_settings','trg_floriday_stock_change_recompute@trade_item_stock','trg_floriday_takeover_runs_updated_at@floriday_takeover_runs','trg_floriday_trade_items_autolink@floriday_trade_items_cache','trg_fust_types_requeue_blocked@fust_types','trg_module_runtime_config_updated_at@module_runtime_config','trg_order_fust_bookings_updated_at@order_fust_bookings','trg_order_items_autolink@order_items','trg_order_items_fusten_aiud@order_items','trg_order_items_reserve@order_items','trg_orders_cancel_release@orders','trg_orders_consume_on_complete@orders','trg_orders_default_phase@orders','trg_orders_external_fulfilled@orders','trg_orders_recompute_reserved@orders','trg_prevent_duplicate_product_draft@trade_item_drafts','trg_product_tray_stickers_touch@product_tray_stickers','trg_products_autolink@products','trg_products_floriday_link_enqueue@products','trg_products_seed_stock@products','trg_requeue_no_warehouse_cache@floriday_trade_items_cache','trg_requeue_no_warehouse_connection@floriday_connections','trg_requeue_no_warehouse_item_pref@trade_item_warehouse_preferences','trg_requeue_skipped_no_price@products','trg_stock_mutation_alert@stock_mutation_log','trg_stock_structure_recompute_ins@trade_item_stock','trg_stock_structure_recompute_upd@trade_item_stock','trg_structure_change_recompute@product_bom_items','trg_structure_change_recompute@product_group_items','trg_structure_change_recompute@product_groups','trg_sync_layer_stock_from_trade_stock@trade_item_stock','trg_sync_products_quantity_from_stock_del@trade_item_stock','trg_sync_products_quantity_from_stock_iu@trade_item_stock','trg_trade_item_drafts_autolink@trade_item_drafts','trg_trade_item_drafts_readonly@trade_item_drafts','trg_trade_item_stock_canonical_key@trade_item_stock','trg_trade_item_stock_publish@trade_item_stock','trg_trade_item_stock_reserve@trade_item_stock','trg_trade_item_stock_updated_at@trade_item_stock','trg_trade_item_stock_zero_watch@trade_item_stock','trg_trade_item_supply_lines_touch@trade_item_supply_lines','trg_trade_item_warehouse_preference_enqueue_stock@trade_item_warehouse_preferences','trg_trade_items_cache_autolink@floriday_trade_items_cache','trg_voorraad_buffer_state_updated_at@voorraad_buffer_state','trg_voorraad_event_log_updated_at@voorraad_logistics_event_log','update_trade_item_drafts_updated_at@trade_item_drafts','update_trade_item_warehouse_preferences_updated_at@trade_item_warehouse_preferences','update_voorraad_custom_fields_updated_at@voorraad_custom_fields','update_voorraad_publish_jobs_updated_at@voorraad_publish_jobs','update_voorraad_publish_learnings_updated_at@voorraad_publish_learnings','update_voorraad_publish_steps_updated_at@voorraad_publish_steps','voorraad_hook_switch_jobs@module_runtime_config','zz_fcsq_first_positive@floriday_continuous_stock_queue'];
+  v_p text[] := ARRAY['Authenticated can add learnings@voorraad_publish_learnings','Authenticated can delete voorraad custom fields@voorraad_custom_fields','Authenticated can insert vbn required characteristics@floriday_vbn_required_characteristics','Authenticated can insert voorraad custom fields@voorraad_custom_fields','Authenticated can read continuous stock cache@floriday_continuous_stock_cache','Authenticated can read learnings@voorraad_publish_learnings','Authenticated can read vbn required characteristics@floriday_vbn_required_characteristics','Authenticated can read voorraad custom fields@voorraad_custom_fields','Authenticated can update learnings@voorraad_publish_learnings','Authenticated can update vbn required characteristics@floriday_vbn_required_characteristics','Authenticated can update voorraad custom fields@voorraad_custom_fields','Authenticated delete trade_item_warehouse_preferences@trade_item_warehouse_preferences','Authenticated insert trade_item_warehouse_preferences@trade_item_warehouse_preferences','Authenticated select trade_item_warehouse_preferences@trade_item_warehouse_preferences','Authenticated update trade_item_warehouse_preferences@trade_item_warehouse_preferences','Eigen momentopnamen lezen@inventory_stock_snapshots','Eigen voorraadinstellingen beheren@floriday_inventory_settings','Eigenaar leest importporties@stock_import_chunks','Eigenaar leest importregels@stock_import_rows','Fust mutations delete@fust_stock_mutations','Fust mutations insert@fust_stock_mutations','Fust mutations read@fust_stock_mutations','Fust mutations update@fust_stock_mutations','Fust types delete@fust_types','Fust types insert@fust_types','Fust types read@fust_types','Fust types update@fust_types','Ingelogde gebruikers kunnen bufferstatus lezen@voorraad_buffer_state','Ingelogde gebruikers kunnen de eventlog lezen@voorraad_logistics_event_log','Ingelogde gebruikers kunnen fustboekingen lezen@order_fust_bookings','Ingelogde gebruikers lezen drempels@inventory_recompute_limits','Ingelogde gebruikers lezen opruimlogboek@structure_cleanup_log','Ingelogde gebruikers lezen opruimruns@floriday_queue_cleanup_runs','Ingelogden beheren traystickers@product_tray_stickers','Ingelogden lezen herberekenwachtrij@inventory_recompute_queue','Ingelogden lezen voorraadmeldingen@stock_integrity_alerts','Ingelogden markeren voorraadmeldingen als gezien@stock_integrity_alerts','Own queue rows select@floriday_continuous_stock_queue','Owner delete trade_item_drafts@trade_item_drafts','Owner insert trade_item_drafts@trade_item_drafts','Owner select trade_item_drafts@trade_item_drafts','Owner update trade_item_drafts@trade_item_drafts','Signed-in users read reconcile runs@floriday_reconcile_runs','Stock delete@trade_item_stock','Stock insert@trade_item_stock','Stock read@trade_item_stock','Stock update@trade_item_stock','Synchronisatieposities lezen@floriday_sync_cursors','Users can insert own publish attempts@voorraad_publish_attempts','Users can read own publish attempts@voorraad_publish_attempts','Users can read own stock mutations@stock_mutation_log','Users manage own import runs@stock_import_runs','Users manage own supply lines@trade_item_supply_lines','Users manage own trade item prices@trade_item_prices','Users manage their own publish jobs@voorraad_publish_jobs','Users manage their own publish steps@voorraad_publish_steps','Verwerkte orders lezen@floriday_sales_order_ingest','Voorraadschrijvers lezen overnameregels@floriday_takeover_items','Voorraadschrijvers lezen overnames@floriday_takeover_runs','authenticated can insert merge log@product_merge_log','authenticated can read merge log@product_merge_log','service role only@voorraad_media_upload_failures','product_packings_read@product_packings','product_packings_write@product_packings'];
+  v_open text[] := ARRAY['voorraad_is_server','voorraad_vereis'];
+  v_func jsonb; v_trig jsonb; v_pol jsonb;
+BEGIN
+  IF NOT public.voorraad_is_server() THEN
+    RAISE EXCEPTION 'Alleen de server mag de installatiecontrole uitvoeren' USING ERRCODE = '42501';
+  END IF;
+  SELECT jsonb_agg(x ORDER BY x->>'functie', x->>'argumenten') INTO v_func FROM (
+    SELECT jsonb_build_object('functie', n.f, 'argumenten', pg_get_function_identity_arguments(p.oid), 'aanwezig', p.oid IS NOT NULL,
+      'soort', CASE WHEN p.oid IS NULL THEN NULL WHEN pg_get_function_result(p.oid) = 'trigger' THEN 'trigger'
+                    WHEN p.provolatile = 'i' THEN 'rekenhulp' WHEN l.lanname = 'sql' THEN 'sql' ELSE 'plpgsql' END,
+      'interne_controle', CASE WHEN p.oid IS NULL THEN NULL
+                               WHEN n.f = ANY(v_open) THEN false
+                               ELSE p.prosrc ~* 'voorraad_vereis\(|voorraad_is_server\(|42501|auth\.uid\(\)|auth\.role\(\)|voorraad_can_write\(|_stock_import_caller\(' END,
+      'controle_niveau', substring(p.prosrc from 'voorraad_vereis\(''([a-z]+)'''),
+      'anon_uitvoerrecht', CASE WHEN p.oid IS NULL THEN NULL ELSE has_function_privilege('anon', p.oid, 'EXECUTE') END,
+      'authenticated_uitvoerrecht', CASE WHEN p.oid IS NULL THEN NULL ELSE has_function_privilege('authenticated', p.oid, 'EXECUTE') END) x
+      FROM unnest(v_f) n(f)
+      LEFT JOIN pg_proc p ON p.proname = n.f AND p.pronamespace = 'public'::regnamespace
+      LEFT JOIN pg_language l ON l.oid = p.prolang) s;
+  SELECT jsonb_agg(jsonb_build_object('trigger', split_part(t, '@', 1), 'tabel', split_part(t, '@', 2),
+           'aanwezig', EXISTS (SELECT 1 FROM pg_trigger g WHERE NOT g.tgisinternal AND g.tgname = split_part(t, '@', 1)
+                                AND g.tgrelid = to_regclass('public.' || split_part(t, '@', 2)))) ORDER BY t) INTO v_trig FROM unnest(v_t) t;
+  SELECT jsonb_agg(jsonb_build_object('policy', split_part(t, '@', 1), 'tabel', split_part(t, '@', 2),
+           'aanwezig', EXISTS (SELECT 1 FROM pg_policies x WHERE x.schemaname = 'public' AND x.policyname = split_part(t, '@', 1)
+                                AND x.tablename = split_part(t, '@', 2))) ORDER BY t) INTO v_pol FROM unnest(v_p) t;
+  RETURN jsonb_build_object(
+    'samenvatting', jsonb_build_object(
+      'functies', jsonb_array_length(v_func),
+      'functies_ontbrekend', (SELECT count(*) FROM jsonb_array_elements(v_func) e WHERE NOT (e->>'aanwezig')::boolean),
+      'functies_zonder_controle_plpgsql', (SELECT count(*) FROM jsonb_array_elements(v_func) e WHERE e->>'soort' = 'plpgsql' AND NOT COALESCE((e->>'interne_controle')::boolean, false)),
+      'triggers_ontbrekend', (SELECT count(*) FROM jsonb_array_elements(v_trig) e WHERE NOT (e->>'aanwezig')::boolean),
+      'policies_ontbrekend', (SELECT count(*) FROM jsonb_array_elements(v_pol) e WHERE NOT (e->>'aanwezig')::boolean),
+      'bewust_open', 'geen pickscherm/scanner-functies zonder inlog in Voorraad'),
+    'correctie_1098', public.voorraad_correctie_status('1098'),
+    'functies', v_func, 'triggers', v_trig, 'policies', v_pol);
+END $function$
+;
+REVOKE ALL ON FUNCTION voorraad_install_check() FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_install_check() FROM anon;
+GRANT EXECUTE ON FUNCTION voorraad_install_check() TO authenticated;
+GRANT EXECUTE ON FUNCTION voorraad_install_check() TO service_role;
+CREATE OR REPLACE FUNCTION public.voorraad_is_server()
+ RETURNS boolean
+ LANGUAGE sql
+ STABLE
+ SET search_path TO 'public'
+AS $function$
+  SELECT COALESCE(NULLIF(current_setting('request.jwt.claims', true), '')::jsonb ->> 'role', '') = 'service_role'
+      OR session_user::text <> 'authenticator'
+$function$
+;
+REVOKE ALL ON FUNCTION voorraad_is_server() FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_is_server() FROM anon;
+REVOKE EXECUTE ON FUNCTION voorraad_is_server() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION voorraad_is_server() TO authenticated;
+GRANT EXECUTE ON FUNCTION voorraad_is_server() TO service_role;
+GRANT EXECUTE ON FUNCTION voorraad_is_server() TO anon;
+GRANT EXECUTE ON FUNCTION voorraad_is_server() TO authenticated;
+GRANT EXECUTE ON FUNCTION voorraad_is_server() TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_mark_floriday_sold_before_switch(p_product_id uuid)
  RETURNS integer
  LANGUAGE plpgsql
@@ -7715,6 +8190,7 @@ CREATE OR REPLACE FUNCTION public.voorraad_mark_floriday_sold_before_switch(p_pr
 AS $function$
 DECLARE r record; n int := 0; v_key text;
 BEGIN
+  PERFORM public.voorraad_vereis('ingelogd', 'voorraad_mark_floriday_sold_before_switch');
   SELECT COALESCE(NULLIF(btrim(p.floriday_trade_item_id),''), p.trade_item_key, 'product:'||p.id::text) INTO v_key
     FROM public.products p WHERE p.id = p_product_id;
   FOR r IN
@@ -7735,6 +8211,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_mark_floriday_sold_before_switch(uuid) FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_mark_floriday_sold_before_switch(uuid) FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_mark_floriday_sold_before_switch(uuid) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_production_enabled()
  RETURNS boolean
@@ -7746,8 +8223,11 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_production_enabled() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION voorraad_production_enabled() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION voorraad_production_enabled() TO anon;
+REVOKE ALL ON FUNCTION voorraad_production_enabled() FROM anon;
+REVOKE EXECUTE ON FUNCTION voorraad_production_enabled() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION voorraad_production_enabled() TO authenticated;
+GRANT EXECUTE ON FUNCTION voorraad_production_enabled() TO service_role;
+REVOKE EXECUTE ON FUNCTION voorraad_production_enabled() FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_production_enabled() TO authenticated;
 GRANT EXECUTE ON FUNCTION voorraad_production_enabled() TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_schema_ddl(p_tables text[], p_functions text[])
@@ -7758,6 +8238,7 @@ CREATE OR REPLACE FUNCTION public.voorraad_schema_ddl(p_tables text[], p_functio
 AS $function$
 DECLARE o text := ''; r record; q text; g text;
 BEGIN
+  PERFORM public.voorraad_vereis('server', 'voorraad_schema_ddl');
   -- reeksen
   FOR r IN SELECT DISTINCT substring(pg_get_expr(d.adbin, d.adrelid) from 'nextval\(''(?:public\.)?([^'']+)''') AS s
              FROM pg_attrdef d JOIN pg_class c ON c.oid = d.adrelid JOIN pg_namespace n ON n.oid = c.relnamespace
@@ -7850,6 +8331,7 @@ BEGIN
 END $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_schema_ddl(text[],text[]) FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_schema_ddl(text[],text[]) FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_schema_ddl(text[],text[]) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_touch_updated_at()
  RETURNS trigger
@@ -7863,10 +8345,39 @@ END;
 $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_touch_updated_at() FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION voorraad_touch_updated_at() TO PUBLIC;
-GRANT EXECUTE ON FUNCTION voorraad_touch_updated_at() TO anon;
+REVOKE ALL ON FUNCTION voorraad_touch_updated_at() FROM anon;
+REVOKE EXECUTE ON FUNCTION voorraad_touch_updated_at() FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION voorraad_touch_updated_at() TO authenticated;
+GRANT EXECUTE ON FUNCTION voorraad_touch_updated_at() TO service_role;
+REVOKE EXECUTE ON FUNCTION voorraad_touch_updated_at() FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_touch_updated_at() TO authenticated;
 GRANT EXECUTE ON FUNCTION voorraad_touch_updated_at() TO service_role;
+CREATE OR REPLACE FUNCTION public.voorraad_vereis(p_niveau text, p_functie text)
+ RETURNS void
+ LANGUAGE plpgsql
+ STABLE
+ SET search_path TO 'public'
+AS $function$
+BEGIN
+  -- Server (service_role of directe databaseverbinding) mag altijd.
+  IF public.voorraad_is_server() THEN RETURN; END IF;
+  -- Keten: binnen een trigger, of aangeroepen door een andere functie (de bovenste aanroep noemt deze functie niet).
+  IF pg_trigger_depth() > 0 THEN RETURN; END IF;
+  IF COALESCE(current_query(), '') !~* ('\m' || p_functie || '\M') THEN RETURN; END IF;
+  IF p_niveau = 'ingelogd' AND auth.uid() IS NOT NULL THEN RETURN; END IF;
+  RAISE EXCEPTION 'Geen toegang tot %: %', p_functie,
+    CASE WHEN p_niveau = 'server' THEN 'alleen de server mag deze functie aanroepen' ELSE 'log eerst in' END
+    USING ERRCODE = '42501';
+END $function$
+;
+REVOKE ALL ON FUNCTION voorraad_vereis(text,text) FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_vereis(text,text) FROM anon;
+REVOKE EXECUTE ON FUNCTION voorraad_vereis(text,text) FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION voorraad_vereis(text,text) TO authenticated;
+GRANT EXECUTE ON FUNCTION voorraad_vereis(text,text) TO service_role;
+GRANT EXECUTE ON FUNCTION voorraad_vereis(text,text) TO anon;
+GRANT EXECUTE ON FUNCTION voorraad_vereis(text,text) TO authenticated;
+GRANT EXECUTE ON FUNCTION voorraad_vereis(text,text) TO service_role;
 CREATE OR REPLACE FUNCTION public.voorraad_week_is_past(p_year integer, p_week integer)
  RETURNS boolean
  LANGUAGE sql
@@ -7880,6 +8391,7 @@ AS $function$
 $function$
 ;
 REVOKE ALL ON FUNCTION voorraad_week_is_past(integer,integer) FROM PUBLIC;
+REVOKE ALL ON FUNCTION voorraad_week_is_past(integer,integer) FROM anon;
 GRANT EXECUTE ON FUNCTION voorraad_week_is_past(integer,integer) TO authenticated;
 GRANT EXECUTE ON FUNCTION voorraad_week_is_past(integer,integer) TO service_role;
@@ -7915,6 +8427,7 @@ DO $c$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'trade_i
 DO $c$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'trade_item_supply_lines_pkey' AND conrelid = 'public.trade_item_supply_lines'::regclass) THEN ALTER TABLE public.trade_item_supply_lines ADD CONSTRAINT trade_item_supply_lines_pkey PRIMARY KEY (id); END IF; END $c$;
 DO $c$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'trade_item_warehouse_preferences_pkey' AND conrelid = 'public.trade_item_warehouse_preferences'::regclass) THEN ALTER TABLE public.trade_item_warehouse_preferences ADD CONSTRAINT trade_item_warehouse_preferences_pkey PRIMARY KEY (id); END IF; END $c$;
 DO $c$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'voorraad_buffer_state_pkey' AND conrelid = 'public.voorraad_buffer_state'::regclass) THEN ALTER TABLE public.voorraad_buffer_state ADD CONSTRAINT voorraad_buffer_state_pkey PRIMARY KEY (buffer_id); END IF; END $c$;
+DO $c$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'voorraad_correcties_pkey' AND conrelid = 'public.voorraad_correcties'::regclass) THEN ALTER TABLE public.voorraad_correcties ADD CONSTRAINT voorraad_correcties_pkey PRIMARY KEY (id); END IF; END $c$;
 DO $c$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'voorraad_custom_fields_pkey' AND conrelid = 'public.voorraad_custom_fields'::regclass) THEN ALTER TABLE public.voorraad_custom_fields ADD CONSTRAINT voorraad_custom_fields_pkey PRIMARY KEY (id); END IF; END $c$;
 DO $c$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'voorraad_logistics_event_log_pkey' AND conrelid = 'public.voorraad_logistics_event_log'::regclass) THEN ALTER TABLE public.voorraad_logistics_event_log ADD CONSTRAINT voorraad_logistics_event_log_pkey PRIMARY KEY (event_id); END IF; END $c$;
 DO $c$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'voorraad_media_upload_failures_pkey' AND conrelid = 'public.voorraad_media_upload_failures'::regclass) THEN ALTER TABLE public.voorraad_media_upload_failures ADD CONSTRAINT voorraad_media_upload_failures_pkey PRIMARY KEY (id); END IF; END $c$;
@@ -8035,155 +8548,157 @@ CREATE UNIQUE INDEX IF NOT EXISTS ux_stock_log_consumption_done ON public.stock_
 -- toegang
 ALTER TABLE public.floriday_continuous_stock_cache ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_continuous_stock_cache TO anon;
+REVOKE ALL ON public.floriday_continuous_stock_cache FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_continuous_stock_cache TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_continuous_stock_cache TO service_role;
 ALTER TABLE public.floriday_continuous_stock_queue ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_continuous_stock_queue TO anon;
+REVOKE ALL ON public.floriday_continuous_stock_queue FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_continuous_stock_queue TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_continuous_stock_queue TO service_role;
 ALTER TABLE public.floriday_inventory_settings ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_inventory_settings TO anon;
+REVOKE ALL ON public.floriday_inventory_settings FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_inventory_settings TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_inventory_settings TO service_role;
 ALTER TABLE public.floriday_queue_cleanup_runs ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_queue_cleanup_runs TO anon;
+REVOKE ALL ON public.floriday_queue_cleanup_runs FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_queue_cleanup_runs TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_queue_cleanup_runs TO service_role;
 ALTER TABLE public.floriday_reconcile_runs ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_reconcile_runs TO anon;
+REVOKE ALL ON public.floriday_reconcile_runs FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_reconcile_runs TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_reconcile_runs TO service_role;
 ALTER TABLE public.floriday_sales_order_ingest ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_sales_order_ingest TO anon;
+REVOKE ALL ON public.floriday_sales_order_ingest FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_sales_order_ingest TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_sales_order_ingest TO service_role;
 ALTER TABLE public.floriday_sync_cursors ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_sync_cursors TO anon;
+REVOKE ALL ON public.floriday_sync_cursors FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_sync_cursors TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_sync_cursors TO service_role;
 ALTER TABLE public.floriday_takeover_items ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_takeover_items TO anon;
+REVOKE ALL ON public.floriday_takeover_items FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_takeover_items TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_takeover_items TO service_role;
 ALTER TABLE public.floriday_takeover_runs ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_takeover_runs TO anon;
+REVOKE ALL ON public.floriday_takeover_runs FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_takeover_runs TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_takeover_runs TO service_role;
 ALTER TABLE public.floriday_vbn_required_characteristics ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_vbn_required_characteristics TO anon;
+REVOKE ALL ON public.floriday_vbn_required_characteristics FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_vbn_required_characteristics TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.floriday_vbn_required_characteristics TO service_role;
 ALTER TABLE public.fust_stock_mutations ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.fust_stock_mutations TO anon;
+REVOKE ALL ON public.fust_stock_mutations FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.fust_stock_mutations TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.fust_stock_mutations TO service_role;
 ALTER TABLE public.fust_types ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.fust_types TO anon;
+REVOKE ALL ON public.fust_types FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.fust_types TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.fust_types TO service_role;
 ALTER TABLE public.inventory_recompute_limits ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.inventory_recompute_limits TO anon;
+REVOKE ALL ON public.inventory_recompute_limits FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.inventory_recompute_limits TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.inventory_recompute_limits TO service_role;
 ALTER TABLE public.inventory_recompute_queue ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.inventory_recompute_queue TO anon;
+REVOKE ALL ON public.inventory_recompute_queue FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.inventory_recompute_queue TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.inventory_recompute_queue TO service_role;
 ALTER TABLE public.inventory_stock_snapshots ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.inventory_stock_snapshots TO anon;
+REVOKE ALL ON public.inventory_stock_snapshots FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.inventory_stock_snapshots TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.inventory_stock_snapshots TO service_role;
 ALTER TABLE public.order_fust_bookings ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.order_fust_bookings TO anon;
+REVOKE ALL ON public.order_fust_bookings FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.order_fust_bookings TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.order_fust_bookings TO service_role;
 ALTER TABLE public.product_merge_log ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.product_merge_log TO anon;
+REVOKE ALL ON public.product_merge_log FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.product_merge_log TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.product_merge_log TO service_role;
 ALTER TABLE public.product_packings ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.product_packings TO anon;
+REVOKE ALL ON public.product_packings FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.product_packings TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.product_packings TO service_role;
 ALTER TABLE public.product_tray_stickers ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.product_tray_stickers TO anon;
+REVOKE ALL ON public.product_tray_stickers FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.product_tray_stickers TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.product_tray_stickers TO service_role;
 ALTER TABLE public.stock_import_chunks ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_import_chunks TO anon;
+REVOKE ALL ON public.stock_import_chunks FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_import_chunks TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_import_chunks TO service_role;
 ALTER TABLE public.stock_import_rows ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_import_rows TO anon;
+REVOKE ALL ON public.stock_import_rows FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_import_rows TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_import_rows TO service_role;
 ALTER TABLE public.stock_import_runs ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_import_runs TO anon;
+REVOKE ALL ON public.stock_import_runs FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_import_runs TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_import_runs TO service_role;
 ALTER TABLE public.stock_integrity_alerts ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_integrity_alerts TO anon;
+REVOKE ALL ON public.stock_integrity_alerts FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_integrity_alerts TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_integrity_alerts TO service_role;
 ALTER TABLE public.stock_mutation_log ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_mutation_log TO anon;
+REVOKE ALL ON public.stock_mutation_log FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_mutation_log TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.stock_mutation_log TO service_role;
 ALTER TABLE public.structure_cleanup_log ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.structure_cleanup_log TO anon;
+REVOKE ALL ON public.structure_cleanup_log FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.structure_cleanup_log TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.structure_cleanup_log TO service_role;
 ALTER TABLE public.trade_item_drafts ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_drafts TO anon;
+REVOKE ALL ON public.trade_item_drafts FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_drafts TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_drafts TO service_role;
 ALTER TABLE public.trade_item_prices ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_prices TO anon;
+REVOKE ALL ON public.trade_item_prices FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_prices TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_prices TO service_role;
 ALTER TABLE public.trade_item_stock ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_stock TO anon;
+REVOKE ALL ON public.trade_item_stock FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_stock TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_stock TO service_role;
 ALTER TABLE public.trade_item_supply_lines ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_supply_lines TO anon;
+REVOKE ALL ON public.trade_item_supply_lines FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_supply_lines TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_supply_lines TO service_role;
 ALTER TABLE public.trade_item_warehouse_preferences ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_warehouse_preferences TO anon;
+REVOKE ALL ON public.trade_item_warehouse_preferences FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_warehouse_preferences TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.trade_item_warehouse_preferences TO service_role;
 ALTER TABLE public.voorraad_buffer_state ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_buffer_state TO anon;
+REVOKE ALL ON public.voorraad_buffer_state FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_buffer_state TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_buffer_state TO service_role;
+ALTER TABLE public.voorraad_correcties ENABLE ROW LEVEL SECURITY;
+GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_correcties TO service_role;
 ALTER TABLE public.voorraad_custom_fields ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_custom_fields TO anon;
+REVOKE ALL ON public.voorraad_custom_fields FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_custom_fields TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_custom_fields TO service_role;
 ALTER TABLE public.voorraad_logistics_event_log ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_logistics_event_log TO anon;
+REVOKE ALL ON public.voorraad_logistics_event_log FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_logistics_event_log TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_logistics_event_log TO service_role;
 ALTER TABLE public.voorraad_media_upload_failures ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_media_upload_failures TO anon;
+REVOKE ALL ON public.voorraad_media_upload_failures FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_media_upload_failures TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_media_upload_failures TO service_role;
 ALTER TABLE public.voorraad_publish_attempts ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_publish_attempts TO anon;
+REVOKE ALL ON public.voorraad_publish_attempts FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_publish_attempts TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_publish_attempts TO service_role;
 ALTER TABLE public.voorraad_publish_jobs ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_publish_jobs TO anon;
+REVOKE ALL ON public.voorraad_publish_jobs FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_publish_jobs TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_publish_jobs TO service_role;
 ALTER TABLE public.voorraad_publish_learnings ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_publish_learnings TO anon;
+REVOKE ALL ON public.voorraad_publish_learnings FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_publish_learnings TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_publish_learnings TO service_role;
 ALTER TABLE public.voorraad_publish_steps ENABLE ROW LEVEL SECURITY;
-GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_publish_steps TO anon;
+REVOKE ALL ON public.voorraad_publish_steps FROM anon;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_publish_steps TO authenticated;
 GRANT DELETE, INSERT, REFERENCES, SELECT, TRIGGER, TRUNCATE, UPDATE ON public.voorraad_publish_steps TO service_role;
 DROP POLICY IF EXISTS "Authenticated can read continuous stock cache" ON public.floriday_continuous_stock_cache;