app.calendar_feeds
TableRow level security on
iCalendar feeds of shifts, meetings, milestones and deadlines (Section 4.6.5), for one member or one of their projects. Only a SHA-256 hash of the secret token is kept; the token is shown once, can be revoked, and the feed shows only what the member may see.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org, derived from app.memberships on insert; never accepted from the caller and never changed.References app.organizations.id |
| membership_id | uuid | No | Member who owns the feed; it shows what they may see.References app.memberships.id |
| project_id | uuid | Yes | Project the feed covers, or null for the member's own feed.References app.projects.id |
| token_hash | bytea | No | SHA-256 of the feed token. |
| token_hint | text | No | Last four characters of the token, to tell feeds apart. |
| last_accessed_at | timestamp with time zone | Yes | Last time a calendar fetched the feed. |
| revoked_at | timestamp with time zone | Yes | When the feed was revoked; a revoked feed serves nothing. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |
| rotated_at | timestamp with time zone | Yes | When the token was last replaced; the previous token stopped working then. |