( tableName: string, access: string, context: ExecutorOwnerPolicyContext | undefined, )
| 76 | }; |
| 77 | |
| 78 | const requireContext = ( |
| 79 | tableName: string, |
| 80 | access: string, |
| 81 | context: ExecutorOwnerPolicyContext | undefined, |
| 82 | ): ExecutorOwnerPolicyContext => { |
| 83 | if (context) return context; |
| 84 | return policyViolation( |
| 85 | `Storage ${access} on table "${tableName}" is missing executor owner context.`, |
| 86 | ); |
| 87 | }; |
| 88 | |
| 89 | /** The rows the bound `{ tenant, subject }` may see/mutate: org rows in the |
| 90 | * tenant, plus this subject's own user rows. |
no test coverage detected