ADR-PFM-OPS-014Licensing records carry no row-level policy; staff-only routes keep them private

ADR-PFM-OPS-014

Licensing records carry no row-level policy; staff-only routes keep them private

KindDecision recordProduct areaPlatformModuleOperational RecordsRevision1

Read atservices-platform ad3f6a65

Licensing records carry no row-level policy; staff-only routes keep them private

Context

Availability is evaluated across workspaces, and company-level coverage is shared.

Keep these records outside workspace row policies. Restrict full commercial reads to staff and map customer reads to the deliberately smaller answer.

Workspace-only policies cannot naturally represent shared company coverage or cross-workspace access resolution.

Privacy depends on route authority, query scope and response mapping for these records.

Show evidence (sources, provenance, origins, pinned commits)

Decision: Read licensing without workspace row policies, using staff routes, explicit query scope and a reduced customer response to protect commercial details.