Add function for cloud to check org permissions;

Author: ChrisPenner

sql/2025-09-08_cloud-org-permission-checks.sql

@@ -0,0 +1,8 @@
+-- Function for cloud to check org permissions.
+CREATE FUNCTION public.user_has_org_permission(user_id UUID, org_user_id UUID, permission permission)
+RETURNS BOOLEAN
+STABLE
+PARALLEL SAFE
+AS $$
+  SELECT user_has_permission(user_id, (SELECT resource_id FROM orgs o WHERE o.user_id = org_user_id), permission);
+$$ LANGUAGE SQL;

transcripts/sql/inserts.sql

@@ -23,15 +23,17 @@ INSERT INTO users (
   email_verified,
   avatar_url,
   name,
-  handle
+  handle,
+  is_org
   )
 VALUES (
   'd32f4ddf-2423-4f10-a4de-465939951354',
   '[email protected]',
   TRUE,
   NULL, -- Test a user with a null avater.
   NULL, -- Test a user with a null name.
-  'test'
+  'test',
+  false
   ),
 (
   'e5e7635c-8db2-4b7f-9fee-86ee8d120ef9',
@@ -40,30 +42,34 @@ VALUES (
   'https://www.gravatar.com/avatar/205e460b479e2e5b48aec07710c08d50?f=y&d=retro',
   'Unison Org',
   'unison'
+  true
   ),
 (
   '43efd5e7-139a-40b2-8a35-3f99b054dc84',
   '[email protected]',
   TRUE,
   'https://www.gravatar.com/avatar/205e460b479e2e5b48aec07710c08d50?f=y&d=retro',
   'The Transcript User',
-  'transcripts'
+  'transcripts',
+  false
   ),
 (
   '3dd1a929-28dd-4585-88aa-96b4dae8606d',
   '[email protected]',
   TRUE,
   'https://www.gravatar.com/avatar/205e460b479e2e5b48aec07710c08d50?f=y&d=retro',
   'Unauthorized User',
-  'unauthorized'
+  'unauthorized',
+  false
   ),
 (
   'fe8921ca-aee7-40a2-8020-241ca78f2a5c',
   '[email protected]',
   TRUE,
   'https://www.gravatar.com/avatar/205e460b479e2e5b48aec07710c08d50?f=y&d=retro',
   'Admin User',
-  'admin'
+  'admin',
+  false
   );
 
 INSERT INTO orgs (