app.user_capability_grants
TableRow level security on
A capability granted to one member beyond their roles, org-wide or for one scope, time-boxed (Section 8).
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Grant id. |
| org_id | uuid | No | Org of the membership, derived from it.References app.organizations.id |
| membership_id | uuid | No | Membership that receives the capability.References app.memberships.id |
| capability_code | text | No | Granted capability.References app.capabilities.code |
| scope_kind | app.grant_target_kind | Yes | Kind of scope the grant is limited to; null for an org-wide grant. |
| scope_id | uuid | Yes | Workspace, team, project or record the grant is limited to; null for an org-wide grant. |
| valid_from | timestamp with time zone | No | When the grant starts. |
| valid_to | timestamp with time zone | Yes | When the grant ends; null while open-ended. |
| granted_by | uuid | Yes | Person who granted it; never the grantee.References app.people.id |
| reason | text | No | Why the grant was made. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |