test(data-access): handle expected RPC-only table permission denials

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: AndreeaGGhita

packages/spacecat-shared-data-access/test/it/postgrest/all-collections-methods-coverage.test.js

@@ -104,6 +104,15 @@ const collectErrorMessages = (error) => {
   return messages.join(' | ');
 };
 
+// RPC-only tables: data-service revokes every PostgREST table grant and exposes them
+// solely through SECURITY DEFINER RPCs, so generic REST reads are denied by design.
+const RPC_ONLY_TABLES = {
+  AbvOnboardingClaim: 'abv_onboarding_claims',
+};
+
+const isRpcOnlyDenial = (entityName, error) => RPC_ONLY_TABLES[entityName] !== undefined
+  && collectErrorMessages(error).includes(`permission denied for table ${RPC_ONLY_TABLES[entityName]}`);
+
 const isExpectedInvocationError = (error) => {
   const message = collectErrorMessages(error);
   return EXPECTED_INVOCATION_ERROR_PATTERNS.some((pattern) => message.includes(pattern));
@@ -339,6 +348,10 @@ describe('PostgREST IT - all collections methods coverage', () => {
               return;
             }
 
+            if (isRpcOnlyDenial(entityName, error)) {
+              return;
+            }
+
             // For mutating methods and synthetic-argument validation in this smoke test,
             // controlled errors are acceptable.
             if (isMutatingMethod(methodName) || isExpectedInvocationError(error)) {