Always the acting user — forms_insert_owner requires created_by = auth.uid().
forms_insert_owner
created_by = auth.uid()
Storage URL of the uploaded blank PDF; the caller owns key-prefix enforcement.
Stamped so the org's editors can edit the template — forms_share_org_consistency rejects share_with_org while org_id IS NULL.
forms_share_org_consistency
share_with_org
org_id IS NULL
Always the acting user —
forms_insert_ownerrequirescreated_by = auth.uid().