Fix collaboration RLS for dedicated schema (#9)

- Fix collaboration RLS for dedicated schema (abfa4027aa9e685145c4d3b9fc286b4198af2470)

app/projects/migrations/0010_collaboration_foundation.sql

@@ -94,20 +94,35 @@ create index ix_approval_requests_workflow_id on approval_requests(workflow_id);
 create index ix_review_comments_request_id on review_comments(request_id);
 create index ix_collaboration_activity_workspace_id on collaboration_activity(workspace_id);
 
--- RLS
+-- RLS: discover and alter only tables in the active dedicated schema.
 do $$
 declare
     table_name text;
+    schema_name text := current_schema();
 begin
-    for table_name in select t.table_name
-    from information_schema.tables t
-    where t.table_schema = 'public'
-    and t.table_name in ('teams', 'team_members', 'invitations', 'project_collaborators', 'approval_workflows', 'approval_requests', 'review_comments', 'collaboration_activity')
+    for table_name in
+        select t.table_name
+        from information_schema.tables t
+        where t.table_schema = schema_name
+          and t.table_name in (
+              'teams',
+              'team_members',
+              'invitations',
+              'project_collaborators',
+              'approval_workflows',
+              'approval_requests',
+              'review_comments',
+              'collaboration_activity'
+          )
     loop
-        execute format('alter table %I enable row level security', table_name);
-        execute format('alter table %I force row level security', table_name);
-        execute format('drop policy if exists collaboration_workspace_isolation on %I', table_name);
-        execute format('create policy collaboration_workspace_isolation on %I using (workspace_id = current_setting(''app.workspace_id'', true)) with check (workspace_id = current_setting(''app.workspace_id'', true))', table_name);
+        execute format('alter table %I.%I enable row level security', schema_name, table_name);
+        execute format('alter table %I.%I force row level security', schema_name, table_name);
+        execute format('drop policy if exists collaboration_workspace_isolation on %I.%I', schema_name, table_name);
+        execute format(
+            'create policy collaboration_workspace_isolation on %I.%I using (workspace_id = current_setting(''app.workspace_id'', true)) with check (workspace_id = current_setting(''app.workspace_id'', true))',
+            schema_name,
+            table_name
+        );
     end loop;
 end $$;