-- Extend the least-privilege boundary to Control API durable state.

REVOKE ALL ON TABLE sense.control_idempotency_receipts FROM PUBLIC;
REVOKE ALL ON TABLE sense.batch_operations FROM PUBLIC;
REVOKE ALL ON TABLE sense.batch_operation_items FROM PUBLIC;

GRANT SELECT, INSERT, UPDATE, DELETE ON TABLE
    sense.control_idempotency_receipts,
    sense.batch_operations,
    sense.batch_operation_items
TO sense_app;