Function assertReachReadOnly

packages/core/sdk/src/owner-policy.ts:135–145

(
  tableName: string,
  access: string,
  context: ExecutorOwnerPolicyContext | undefined,
)

 * bound behavior.
 */
export const assertReachReadOnly = (
  tableName: string,
  access: string,
  context: ExecutorOwnerPolicyContext | undefined,
): void => {
  if (context === undefined) return;
  if (context.reach !== "tenant" && context.writes !== "denied") return;
  policyViolation(
    `Storage ${access} on table "${tableName}" is not allowed: the platform view is read-only.`,
  );
};

/** Assert a create/upsert writes a row inside the bound partition. */
export const assertOwnerWritable = (