Keep JSONB authorization predicates safe for legacy shapes
When a PostgreSQL JSONB column contains legacy arrays or scalar values, an authorization query that calls jsonb_each can fail before application access checks run. For a fixed set of permitted fields, use direct key lookup and exact value comparisons; permit array membership only…