urlaubsverwaltung / zeiterfassung

Du möchtest (oder musst) Arbeitszeiten in deinem Unternehmen digital erfassen und nachweisen können? 🦥
http://urlaubsverwaltung.cloud/zeiterfassung
GNU Affero General Public License v3.0
41 stars 3 forks source link

Row level security missing for absence table #814

Closed honnel closed 1 week ago

honnel commented 1 week ago

Currently, no security policy exists to enable row level security for absence table

ALTER TABLE absence ENABLE ROW LEVEL SECURITY;
DROP POLICY IF EXISTS absence_tenant_isolation_policy ON absence;
CREATE POLICY absence_tenant_isolation_policy ON absence
    USING (tenant_id = current_setting('app.tenant_id')::VARCHAR);