feat(role): role bind

scripts/db/verify/0005_refresh_token_fingerprint.sql

@@ -0,0 +1,12 @@
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM information_schema.columns
+    WHERE table_schema = 'public'
+      AND table_name = 'refresh_tokens'
+      AND column_name = 'token_fingerprint'
+  ) THEN
+    RAISE EXCEPTION 'refresh_tokens.token_fingerprint missing';
+  END IF;
+END $$;
+

scripts/db/verify/0006_cms_permissions.sql

@@ -0,0 +1,7 @@
+DO $$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM permissions WHERE code = 'cms:article:create') THEN
+    RAISE EXCEPTION 'missing cms permissions seed';
+  END IF;
+END $$;
+