app.record_external_visibility
TableRow level security on
Which external role types or named parties may see a record (Section 7.4 external_visibility), one row each. No rows means the record is internal only. External reach itself is granted through engagements (Section 8.7).
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org, derived from app.records on insert; never accepted from the caller and never changed.References app.organizations.id |
| record_id | uuid | No | Record shown externally.References app.records.id |
| external_role_type | app.external_role_type | Yes | External role type that may see the record, for example Client. |
| person_id | uuid | Yes | Named external person who may see the record.References app.people.id |
| organization_id | uuid | Yes | Named external organization whose engaged people may see the record.References app.organizations.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |