Showing the changes to apps/cloud/src/admin (1 of 161 files). Show all
Unified · Split
| @@ -17,7 +17,7 @@ · 16 unmodified lines | |||
| 17 | // acting member, and this plane deliberately serves the whole tenant. | 17 | // acting member, and this plane deliberately serves the whole tenant. |
| 18 | // | 18 | // |
| 19 | // The executor is built by `makePlatformExecutor` — `{ tenant, subject: | 19 | // The executor is built by `makePlatformExecutor` — `{ tenant, subject: |
| 20 | // undefined, platformView: true }` — so the reads are tenant-wide and read-only | 20 | // undefined, access: platformObserverAccess() }` — so the reads are tenant-wide and read-only |
| 21 | // by storage policy, and no `subject` row is minted for the caller. | 21 | // by storage policy, and no `subject` row is minted for the caller. |
| 22 | // | 22 | // |
| 23 | // Cross-tenant isolation is structural, not a check in this file: the tenant is | 23 | // Cross-tenant isolation is structural, not a check in this file: the tenant is |