fix(plugin-security): a USING-only RLS policy holds INSERT and UPDATE rows to its using by objectstack-fleet[bot] · Pull Request #19952 · objectstack-ai/objectstack

fix(plugin-security): a USING-only RLS policy now gates the write post-image

claude

committed

bcbf621

test(plugin-security): pin the USING-as-check default on insert and update

claude

committed

000e7d7

fix(plugin-security): the defaulted write check composes the floor the pre-image kept

claude

committed

2fdda29

test(plugin-security): triage the tenant fixture and pin the floor composition

claude

committed

cc9025a

test(dogfood): a smuggled re-owner of an API key is refused by the defaulted check

claude

committed

f3fa2cd

chore(changeset): plugin-security holds USING-only policies to their using on writes

claude

committed

19236d9

chore(changeset): declare the USING-as-check default a narrowing (minor, BREAKING, ADR-0087 disposition)

claude

committed

62af558

fix(plugin-security,plugin-auth): cite the resolving record for the master-gate ruling; pin the post-image own-row read

claude

committed

ecea3b4

docs(plugin-security): cite the landed commit for the master-gate ruling, not an unresolvable number

claude

committed

62d1277

Navigation Menu

Repository navigation

fix(plugin-security): a USING-only RLS policy holds INSERT and UPDATE rows to its using - #19952

fix(plugin-security): a USING-only RLS policy holds INSERT and UPDATE rows to its using#19952
huangyiirene merged 9 commits into
mainfrom
claude/issue-19942-rls-check-defaults-to-using

Commits on Sep 24, 2026

fix(plugin-security): a USING-only RLS policy now gates the write post-image

test(plugin-security): pin the USING-as-check default on insert and update

fix(plugin-security): the defaulted write check composes the floor the pre-image kept

test(plugin-security): triage the tenant fixture and pin the floor composition

test(dogfood): a smuggled re-owner of an API key is refused by the defaulted check

chore(changeset): plugin-security holds USING-only policies to their using on writes

chore(changeset): declare the USING-as-check default a narrowing (minor, BREAKING, ADR-0087 disposition)

fix(plugin-security,plugin-auth): cite the resolving record for the master-gate ruling; pin the post-image own-row read

docs(plugin-security): cite the landed commit for the master-gate ruling, not an unresolvable number