[Diubii]

Summary

• Adds migration 0023_audit_read_permission, which seeds audit:read ("Read the audit log") the same way 0016 seeds the rest of the migration catalog: an ordinary permission (managed = false), no role granted, ON CONFLICT (key) DO NOTHING.
• The snapshot is a copy of 0022's: the schema is unchanged.

Why

The central audit log (PoliNetworkOrg/backend#90) and its dashboard page (PoliNetworkOrg/admin#123) check audit:read, but no environment defines it. Master Admin's wildcard only covers permissions that exist in the catalog (resolveAccess in src/auth/rbac.ts), so today nobody can open the page, not even Master Admin, and it can't be given to any role.

Test plan

• drizzle-kit migrate on a local DB: the permission is created
• drizzle-kit check
• vp check, vp test

🤖 Generated with Claude Code

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 357abd73-bf34-4295-afa8-ac6ad4ee21b2

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}