jesse-uxandGrok (agent loop)
fca62fda43
BUG-1063：后台按列只读档案，授权前数据库拒绝读表，授权后通过。对话输入框下和报告标题下加上 AI 生成说明。状态板按已部署提交改措辞，不标 resolved。下载文件元数据没有做。 自测：tsc 退出码 0；lint 0 error；定向测试 51 通过；test:db 82 项里 13 项为 Windows 已知失败，无新增；隐私标记退出码 0。 Co-Authored-By: Grok (agent loop)
38 lines
920 B
PL/PgSQL
38 lines
920 B
PL/PgSQL
-- BUG-1063: the report worker reads another person's archive through
|
|
-- service_role (loadSubjectBirth → CHART_SUBJECT_SELECT). The 2026-07-18
|
|
-- repair revoked every privilege on chart_profiles and never granted SELECT
|
|
-- back. Column-level SELECT only, matching CHART_SUBJECT_SELECT. No write,
|
|
-- no RLS change, no change to authenticated grants.
|
|
begin;
|
|
|
|
grant select (
|
|
id,
|
|
user_id,
|
|
role,
|
|
name,
|
|
birth_date,
|
|
reported_birth_time,
|
|
birth_time_source,
|
|
birth_time_period,
|
|
declared_window_start,
|
|
declared_window_end,
|
|
uncertainty_before_minutes,
|
|
uncertainty_after_minutes,
|
|
latitude,
|
|
longitude,
|
|
timezone_id,
|
|
timezone_offset,
|
|
birth_place_label,
|
|
birth_place_type,
|
|
birth_place_provider,
|
|
birth_place_provider_id,
|
|
ayanamsa,
|
|
active_birth_time,
|
|
active_birth_date,
|
|
active_birth_timezone_offset,
|
|
birth_time_status,
|
|
gender
|
|
) on table public.chart_profiles to service_role;
|
|
|
|
commit;
|