@accounter/server
Version:
Accounter GraphQL server
15 lines (14 loc) • 747 B
TypeScript
/**
* Enable RLS on super_admins with read-only access for the app user.
* The app can SELECT (to verify super-admin status) but cannot INSERT/UPDATE/DELETE
* (mutations must go through a privileged DBA connection, not the app).
* This prevents a compromised app from self-promoting to super-admin.
*/
declare const _default: {
name: string;
run: ({ sql }: {
sql: (template: TemplateStringsArray, ...values: import("@slonik/sql-tag").ValueExpression[]) => import("slonik").QuerySqlToken;
connection: import("slonik").DatabaseTransactionConnection | import("slonik").DatabasePool;
}) => import("slonik").QuerySqlToken<import("@standard-schema/spec").StandardSchemaV1<unknown, unknown>>;
};
export default _default;