app.access_review_items
TableRow level security on
One role assignment to confirm or remove in an access review campaign (Section 8.4). Taken when the campaign opens; decided once. Removed ends the role at once.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org, derived from app.access_review_campaigns on insert; never accepted from the caller and never changed.References app.organizations.id |
| access_review_campaign_id | uuid | No | Campaign the item belongs to.References app.access_review_campaigns.id |
| membership_role_id | uuid | No | Role assignment under review.References app.membership_roles.id |
| decision | text | Yes | Confirmed or Removed; NULL while unreviewed. Final once set. |
| decided_by | uuid | Yes | Reviewer, from the session; NULL for an automatic removal of unreviewed access.References app.people.id |
| decided_at | timestamp with time zone | Yes | When the decision was recorded. |
| flagged_at | timestamp with time zone | Yes | When the item was flagged as unreviewed after the grace period; NULL until then. |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |