1 Commits

Include renames

Author	SHA1	Message	Date
Moheeb Zara	26e54f1fcb	fix(rls): members_update WITH CHECK mirrors USING (D8) ... UPDATE policy was USING-only: a privileged caller could mutate a member row into a space they don't administer (no post-image re-check). Migration 043 adds the mirrored WITH CHECK. Self column escalation (space_id/role/status) remains blocked by the trigger (D9). Schema + DB maps updated.	2026-05-18 18:39:53 -07:00