app.break_glass_sessions
TableRow level security on
Emergency full access an Owner took for one hour with a second factor and a written reason (Section 8.4). Every Owner and Admin is notified and the audit ledger records the start and end. Written only by app.start_break_glass and app.end_break_glass.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org. A row never moves to another org.References app.organizations.id |
| person_id | uuid | No | Owner who took emergency access, from the session.References app.people.id |
| reason | text | No | Written reason, 20 to 2000 characters. |
| started_at | timestamp with time zone | No | When emergency access began. |
| expires_at | timestamp with time zone | No | When it ends on its own: one hour after it began. |
| ended_at | timestamp with time zone | Yes | When the holder ended it early; NULL when it ran its hour. |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |