chihlasm/resolutionflow
1
0
Fork 0
Code Issues 23 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix: seed_test_users must use ADMIN_DATABASE_URL after Phase 4 RLS on users

Browse Source 
RLS is now enabled on the users table. The seed script was using the
app-role connection (DATABASE_URL) which has no tenant context at seed
time — all SELECTs return 0 rows and INSERTs are blocked by FORCE RLS.

Falls back to DATABASE_URL if ADMIN_DATABASE_URL is not set (local dev
without roles configured).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
chihlasm
2026-04-12 03:12:46 +00:00
parent 6f53ec06f5
commit 501442e5f0
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
backend/scripts/seed_test_users.py
View File

@@ -80,7 +80,10 @@ def _display_code() -> str:
async def main() -> None: async def main() -> None:
engine = create_async_engine(settings.DATABASE_URL, echo=False) # Must use ADMIN_DATABASE_URL (BYPASSRLS) — Phase 4 enabled RLS on users.
# The app-role connection has no tenant context at seed time and would see 0 rows.
admin_url = getattr(settings, "ADMIN_DATABASE_URL", None) or settings.DATABASE_URL
engine = create_async_engine(admin_url, echo=False)
password_hash = get_password_hash(SHARED_PASSWORD) password_hash = get_password_hash(SHARED_PASSWORD)
now = datetime.now(timezone.utc) now = datetime.now(timezone.utc)
team_account_id: uuid.UUID | None = None team_account_id: uuid.UUID | None = None