app.invites
TableRow level security on
Invitation of an email address to an org with a role and expiry (Section 4.8.1). Only a SHA-256 hash of the token is stored; the token is shown once.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Invite id. |
| org_id | uuid | No | Org the invite joins.References app.organizations.id |
| text | No | Lowercased email the invite is for. Acceptance requires a confirmed sign-in with this email. | |
| role_id | uuid | No | Role granted on acceptance: a system role or a custom role of the org.References app.roles.id |
| token_hash | bytea | No | SHA-256 of the invite token. |
| expires_at | timestamp with time zone | No | After this time the invite cannot be accepted. |
| invited_by | uuid | No | Person who issued the invite and is accountable for the role it grants.References app.people.id |
| partner_bootstrap | boolean | No | True for the first Owner invite a partner issues when it creates a client org (Section 4.6.1). |
| failed_attempts | smallint | No | Acceptance attempts with this token by a sign-in whose email did not match. The token locks at 5. |
| accepted_at | timestamp with time zone | Yes | When the invite was accepted. |
| accepted_person_id | uuid | Yes | Person who accepted.References app.people.id |
| revoked_at | timestamp with time zone | Yes | When the invite was revoked. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |