SupabaseGrantScopePredicateColumns
SupabaseGrantScopePredicateColumns =
GrantScopeClaimOptions&object
Defined in: packages/contracts/src/supabase-rls.ts:628
Type Declaration
Section titled “Type Declaration”bypass?
Section titled “bypass?”
optionalbypass?:GrantScopeBypassOptions
Optional unconditional bypass (GrantScopeBypassOptions): any grant whose role ∈
bypass.roleValues and whose scope.kind = bypass.scopeKind (default “platform”) grants all
rows — e.g. a platform-scoped platform_admin. The bypass is an uncorrelated EXISTS, so it
stays InitPlan-hoisted in both the correct and naive forms. Its read-path twin is
buildGrantScopeAccessShapeWhere (bypass → null, i.e. no shape filter at all).
scopeCastType?
Section titled “scopeCastType?”
optionalscopeCastType?:string
SQL type the extracted grant id is cast to before comparison (default “uuid”).
scopeColumn
Section titled “scopeColumn”scopeColumn:
AnyColumn
Column on the governed row naming its scope (e.g. offerings.id reference column). Table name is derived from it.