pacnpal/thrilltrack-explorer
1
0
Fork 0
mirror of https://github.com/pacnpal/thrilltrack-explorer.git synced 2025-12-27 08:46:57 -05:00
Code Issues Packages Projects Releases Wiki Activity

Fix content_submissions RLS policies

Browse Source
This commit is contained in:
gpt-engineer-app[bot]
2025-10-17 20:12:10 +00:00
parent dd95b99238
commit 09090c29f8
1 changed files with 36 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
supabase/migrations/20251017201154_2e307a9a-49cf-49f7-bd38-468cb384c742.sql Normal file
View File

@@ -0,0 +1,36 @@
-- Drop broken policies on content_submissions that directly query auth.mfa_factors
DROP POLICY IF EXISTS "Moderators can view all submissions" ON public.content_submissions;
DROP POLICY IF EXISTS "Moderators can update submissions" ON public.content_submissions;
DROP POLICY IF EXISTS "Moderators can update submissions with MFA" ON public.content_submissions;
DROP POLICY IF EXISTS "Moderators can delete submissions with MFA" ON public.content_submissions;
-- Recreate policies using has_mfa_enabled() function
CREATE POLICY "Moderators can view all submissions"
ON public.content_submissions
FOR SELECT
TO authenticated
USING (
is_moderator(auth.uid()) AND
(NOT has_mfa_enabled(auth.uid()) OR has_aal2())
);
CREATE POLICY "Moderators can update submissions"
ON public.content_submissions
FOR UPDATE
TO authenticated
USING (
is_moderator(auth.uid()) AND
(NOT has_mfa_enabled(auth.uid()) OR has_aal2())
)
WITH CHECK (
is_moderator(auth.uid()) AND
(NOT has_mfa_enabled(auth.uid()) OR has_aal2())
);
CREATE POLICY "Moderators can delete submissions with MFA"
ON public.content_submissions
FOR DELETE
TO authenticated
USING (
is_moderator(auth.uid()) AND has_aal2()
);