app.access_scans
TablePartitioned by monthRow level security on
Append-only log of credential scans at zones. The result is decided by the database from the credential and the access grid at the scan time, never by the scanner.
Primary key: id, created_at
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org, derived from app.credentials on insert; never accepted from the caller and never changed.References app.organizations.id |
| credential_id | uuid | No | Credential scanned.References app.credentials.id |
| zone_id | uuid | No | Zone entered.References app.zones.id |
| scanned_at | timestamp with time zone | No | When the scan happened, set by the database. |
| result | app.scan_result | No | Granted or Denied. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |
| device_scanned_at | timestamp with time zone | Yes | When the device scanned, from the device clock; NULL for a scan decided online. scanned_at stays the server time. |
| offline_result | app.scan_result | Yes | What the device decided offline from its cached access grid; NULL for a scan decided online. The database result is authoritative. |
| project_id | uuid | No | Project of the scanned credential, copied by the database for Compass sync.References app.projects.id |