Joururi/leim-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixed RLS issues for calendars

Browse Source
This commit is contained in:
Alexis
2025-03-07 18:35:14 +01:00
parent 31a4316186
commit 965452671b
1 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
supabase/migrations/202401_init.sql
View File

@@ -214,8 +214,9 @@ create policy "Allow individual update access" on public.users for update using
create policy "Allow individual read access" on public.user_roles for select using ( auth.uid() = user_id ); create policy "Allow individual read access" on public.user_roles for select using ( auth.uid() = user_id );
-- World policies -- World policies
create policy "Allow anonymous access to published worlds" on public.worlds create policy "Allow public access to published worlds" on public.worlds
for select for select
to authenticated, anon
using (state = 'published'); using (state = 'published');
create policy "Allow GMs to see their worlds" on public.worlds for select using ( ( auth.uid() = gm_id ) ); create policy "Allow GMs to see their worlds" on public.worlds for select using ( ( auth.uid() = gm_id ) );
create policy "Allow GMs to create worlds" on public.worlds for insert with check ( auth.uid() = gm_id ); create policy "Allow GMs to create worlds" on public.worlds for insert with check ( auth.uid() = gm_id );
@@ -223,8 +224,9 @@ create policy "Allow GMs to edit their worlds" on public.worlds for update using
create policy "Allow GMs to delete their worlds" on public.worlds for delete using ( auth.uid() = gm_id ); create policy "Allow GMs to delete their worlds" on public.worlds for delete using ( auth.uid() = gm_id );
-- Calendar policies -- Calendar policies
create policy "Allow anonymous access to published calendars" on public.calendars create policy "Allow public access to published calendars" on public.calendars
for select for select
to authenticated, anon
using ( using (
exists ( exists (
select 1 select 1
@@ -249,7 +251,7 @@ create policy "Allow GMs to add calendars to their world" on public.calendars fo
and worlds.gm_id = auth.uid() and worlds.gm_id = auth.uid()
) )
); );
create policy "Allow GMs to edit their calendars" on public.calendars for update with check ( create policy "Allow GMs to edit their calendars" on public.calendars for update using (
exists ( exists (
select 1 from worlds select 1 from worlds
where worlds.id = calendars.world_id where worlds.id = calendars.world_id
@@ -265,8 +267,9 @@ create policy "Allow GMs to delete their calendars" on public.calendars for dele
); );
-- Month policies -- Month policies
create policy "Allow anonymous access to months in published calendars" ON public.calendar_months create policy "Allow anonymous access to months in published calendars" on public.calendar_months
for select for select
to authenticated, anon
using ( using (
exists ( exists (
select 1 select 1
@@ -332,8 +335,9 @@ create policy "Allow GMs to delete their calendar's months"
); );
-- Event policies -- Event policies
create policy "Allow anonymous access to non-hidden events in published calendars" ON public.calendar_events create policy "Allow anonymous access to non-hidden events in published calendars" on public.calendar_events
for select for select
to authenticated, anon
using ( using (
not hidden and exists ( not hidden and exists (
select 1 select 1