app.role_capabilities
TableRow level security on
Capabilities a role grants and how far each reaches. System role rows are generated; custom role rows are edited by the org.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Grant id. |
| org_id | uuid | Yes | Org of the role, derived from it; null for system roles.References app.organizations.id |
| role_id | uuid | No | Role that grants the capability.References app.roles.id |
| capability_code | text | No | Granted capability.References app.capabilities.code |
| reach | app.capability_reach | No | Own rows, assigned scopes, or the whole org. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |