mirror of
https://github.com/garrytan/gstack.git
synced 2026-05-05 05:05:08 +02:00
Garry Tan
f7ae465415
- 001_teams.sql: teams + team_members + RLS - 002_eval_runs.sql: eval results with universal format, indexes, upsert key - 003_data_tables.sql: retro, QA, ship, greptile, transcripts + RLS All tables use RLS: team members read/insert, admins delete. Transcript table has tighter policy (admin-only read). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
45 lines
1.3 KiB
SQL
45 lines
1.3 KiB
SQL
-- 001_teams.sql — Core team infrastructure.
|
|
--
|
|
-- Creates teams and team_members tables with RLS policies.
|
|
-- Must be run first — other tables reference teams.
|
|
|
|
-- Teams
|
|
create table if not exists teams (
|
|
id uuid primary key default gen_random_uuid(),
|
|
name text not null,
|
|
slug text not null unique,
|
|
created_at timestamptz default now()
|
|
);
|
|
|
|
-- Team membership
|
|
create table if not exists team_members (
|
|
team_id uuid references teams(id) on delete cascade,
|
|
user_id uuid references auth.users(id) on delete cascade,
|
|
role text not null default 'member' check (role in ('owner', 'admin', 'member')),
|
|
primary key (team_id, user_id)
|
|
);
|
|
|
|
-- RLS for teams
|
|
alter table teams enable row level security;
|
|
|
|
create policy "team_members_read_team" on teams
|
|
for select using (
|
|
id in (select team_id from team_members where user_id = auth.uid())
|
|
);
|
|
|
|
-- RLS for team_members
|
|
alter table team_members enable row level security;
|
|
|
|
create policy "members_read_own_team" on team_members
|
|
for select using (
|
|
team_id in (select team_id from team_members where user_id = auth.uid())
|
|
);
|
|
|
|
create policy "admins_manage_members" on team_members
|
|
for all using (
|
|
team_id in (
|
|
select team_id from team_members
|
|
where user_id = auth.uid() and role in ('owner', 'admin')
|
|
)
|
|
);
|