app.credentials
TableRow level security on
Credentials issued to people. A person never issues their own credential (invariant 21); revocation is stamped and final.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org, derived from app.credential_categories on insert; never accepted from the caller and never changed.References app.organizations.id |
| credential_category_id | uuid | No | Category issued.References app.credential_categories.id |
| holder_person_id | uuid | No | Person holding the credential.References app.people.id |
| credential_number | text | No | Number printed and scanned, issued by the database. |
| issued_by | uuid | Yes | Person who issued it, from the session; never the holder.References app.people.id |
| valid_from | timestamp with time zone | No | When it starts working. |
| valid_to | timestamp with time zone | Yes | When it stops working. |
| revoked_at | timestamp with time zone | Yes | When it was revoked. |
| revoked_by | uuid | Yes | Who revoked it.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| project_id | uuid | No | Project of the credential's category, copied by the database for Compass sync.References app.projects.id |
| engagement_id | uuid | Yes | Engagement the credential was issued under, such as an artist's party badge; NULL for a credential issued directly.References app.engagements.id |