( tableName: string, access: string, context: ExecutorOwnerPolicyContext | undefined, )
| 40 | }; |
| 41 | |
| 42 | const requireContext = ( |
| 43 | tableName: string, |
| 44 | access: string, |
| 45 | context: ExecutorOwnerPolicyContext | undefined, |
| 46 | ): ExecutorOwnerPolicyContext => { |
| 47 | if (context) return context; |
| 48 | return policyViolation( |
| 49 | `Storage ${access} on table "${tableName}" is missing executor owner context.`, |
| 50 | ); |
| 51 | }; |
| 52 | |
| 53 | /** The rows the bound `{ tenant, subject }` may see/mutate: org rows in the |
| 54 | * tenant, plus this subject's own user rows. */ |
no test coverage detected