krona-staff/migrations/0002_security_hardening.down.sql

30 lines
1.7 KiB
SQL

DROP POLICY IF EXISTS staff_audit_tenant_select ON staff_audit_log;
DROP POLICY IF EXISTS staff_audit_tenant_insert ON staff_audit_log;
CREATE POLICY staff_audit_tenant_isolation ON staff_audit_log
USING (tenant_id = current_setting('app.tenant_id', true))
WITH CHECK (tenant_id = current_setting('app.tenant_id', true));
DO $$
BEGIN
IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'krona_staff_app') THEN
GRANT UPDATE, DELETE ON staff_audit_log TO krona_staff_app;
END IF;
END
$$;
ALTER TABLE staff_inbox DROP CONSTRAINT IF EXISTS staff_inbox_event_id_check;
ALTER TABLE staff_inbox DROP CONSTRAINT IF EXISTS staff_inbox_tenant_id_check;
ALTER TABLE staff_inbox DROP CONSTRAINT IF EXISTS staff_inbox_correlation_id_check;
ALTER TABLE staff_inbox DROP CONSTRAINT IF EXISTS staff_inbox_causation_id_check;
ALTER TABLE staff_idempotency_keys DROP CONSTRAINT IF EXISTS staff_idempotency_keys_tenant_id_check;
ALTER TABLE staff_audit_log DROP CONSTRAINT IF EXISTS staff_audit_log_id_check;
ALTER TABLE staff_audit_log DROP CONSTRAINT IF EXISTS staff_audit_log_tenant_id_check;
ALTER TABLE staff_audit_log DROP CONSTRAINT IF EXISTS staff_audit_log_actor_id_check;
ALTER TABLE staff_audit_log DROP CONSTRAINT IF EXISTS staff_audit_log_entity_id_check;
ALTER TABLE staff_audit_log DROP CONSTRAINT IF EXISTS staff_audit_log_correlation_id_check;
ALTER TABLE staff_outbox DROP CONSTRAINT IF EXISTS staff_outbox_correlation_id_check;
ALTER TABLE staff_outbox DROP CONSTRAINT IF EXISTS staff_outbox_causation_id_check;
ALTER TABLE staff_outbox DROP COLUMN IF EXISTS subject_type;
ALTER TABLE staff_outbox DROP COLUMN IF EXISTS subject_id;
ALTER TABLE staff_outbox DROP COLUMN IF EXISTS actor_type;
ALTER TABLE staff_outbox DROP COLUMN IF EXISTS actor_id;