@team-semicolon/semicolony-cli 4.18.73 → 4.18.74
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -0,0 +1,46 @@
|
|
|
1
|
+
-- 182_skill_governance_gateway_runtime_grants.sql
|
|
2
|
+
--
|
|
3
|
+
-- Migration 161 originally created the governed skill tables. Its sc_app
|
|
4
|
+
-- grants were strengthened later, after some environments had already marked
|
|
5
|
+
-- that migration as applied. Re-assert the runtime contract in a new additive
|
|
6
|
+
-- migration so kb-gateway can stage, activate, and project immutable releases
|
|
7
|
+
-- without receiving lease-administration authority.
|
|
8
|
+
|
|
9
|
+
REVOKE ALL ON TABLE
|
|
10
|
+
semicolony.skill_capability_leases,
|
|
11
|
+
semicolony.skill_capability_lease_revocations
|
|
12
|
+
FROM PUBLIC, sc_app;
|
|
13
|
+
|
|
14
|
+
REVOKE ALL ON TABLE
|
|
15
|
+
semicolony.skill_releases,
|
|
16
|
+
semicolony.skill_release_files,
|
|
17
|
+
semicolony.skill_release_activations,
|
|
18
|
+
semicolony.skill_change_proposals,
|
|
19
|
+
semicolony.project_skill_releases,
|
|
20
|
+
semicolony.v_current_skill_capability_leases,
|
|
21
|
+
semicolony.v_current_skill_release_activations
|
|
22
|
+
FROM PUBLIC, sc_app;
|
|
23
|
+
|
|
24
|
+
GRANT SELECT, INSERT ON TABLE
|
|
25
|
+
semicolony.skill_releases,
|
|
26
|
+
semicolony.skill_release_files,
|
|
27
|
+
semicolony.skill_release_activations
|
|
28
|
+
TO sc_app;
|
|
29
|
+
|
|
30
|
+
GRANT INSERT ON TABLE
|
|
31
|
+
semicolony.skill_change_proposals,
|
|
32
|
+
semicolony.project_skill_releases
|
|
33
|
+
TO sc_app;
|
|
34
|
+
|
|
35
|
+
GRANT SELECT (proposal_id, recorded_at) ON TABLE
|
|
36
|
+
semicolony.skill_change_proposals
|
|
37
|
+
TO sc_app;
|
|
38
|
+
|
|
39
|
+
GRANT SELECT (project_release_id, recorded_at) ON TABLE
|
|
40
|
+
semicolony.project_skill_releases
|
|
41
|
+
TO sc_app;
|
|
42
|
+
|
|
43
|
+
GRANT SELECT ON TABLE
|
|
44
|
+
semicolony.v_current_skill_capability_leases,
|
|
45
|
+
semicolony.v_current_skill_release_activations
|
|
46
|
+
TO sc_app;
|