mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-09 21:10:59 +00:00
Marc-André Bombeck
a463b1fa01
A consent record has to answer who consented and when, and the grant row already does. It does not have to answer from where, and an address kept for as long as both accounts exist is personal data held past the point it evidences anything. Nothing read the column, which makes it exactly the write-only field scripts/audit-column-readers.ts exists to surface. The acceptance stays evidenced: audit_logs records it with the caller's address under that table's own retention. The column never reached the wire, so the grant view and the OpenAPI contract are unchanged. Written before the feature shipped, so migration 0295 drops an empty column.
11 lines
536 B
SQL
11 lines
536 B
SQL
-- v1.36.0 — drop the address the delegate accepted from.
|
|
--
|
|
-- A consent record has to say who consented and when. It does not need to say
|
|
-- from where, and an address kept for as long as both accounts exist is
|
|
-- personal data held well past the point it answers anything. Nothing reads
|
|
-- the column; the acceptance is still recorded in `audit_logs` with its IP,
|
|
-- under that table's own retention.
|
|
--
|
|
-- Written before the feature shipped, so there is no data to migrate.
|
|
ALTER TABLE "account_grants" DROP COLUMN "accepted_ip";
|