Weei HanandClaude Sonnet 5 1b3ba67468 M0: add department_id JWT claim, rewrite RLS to avoid profiles queries ...

auth-hook.sql now copies department_id into JWT claims alongside
role/org_id, so RLS can scope Staff reads without joining profiles
from another table's policy. policies.sql: sops/sop_versions Staff
read policies now use the department_id claim directly; every create
policy paired with a matching drop policy if exists so the file is
safe to re-run. Folds in the supabase_auth_admin profiles-select grant
so policies.sql is self-contained.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FcktbLXSSXzx23GCue813e

2026-07-30 20:38:38 +08:00

..

auth-hook.sql

M0: add department_id JWT claim, rewrite RLS to avoid profiles queries

2026-07-30 20:38:38 +08:00

policies.sql

M0: add department_id JWT claim, rewrite RLS to avoid profiles queries

2026-07-30 20:38:38 +08:00

schema.sql

M0: DB schema, RLS policies, JWT claims hook, seed, Supabase clients

2026-07-30 19:00:24 +08:00

seed.sql

M0: DB schema, RLS policies, JWT claims hook, seed, Supabase clients

2026-07-30 19:00:24 +08:00