pacnpal/thrilltrack-explorer
1
0
Fork 0
mirror of https://github.com/pacnpal/thrilltrack-explorer.git synced 2025-12-21 23:11:12 -05:00
Code Issues Packages Projects Releases Wiki Activity

Add security functions and policies

Browse Source
This commit is contained in:
gpt-engineer-app[bot]
2025-09-28 18:26:02 +00:00
parent d6aa5f683f
commit d97c41f393
5 changed files with 734 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

42
src/hooks/useUserRole.ts
View File

@@ -2,11 +2,21 @@ import { useState, useEffect } from 'react';
import { supabase } from '@/integrations/supabase/client';
import { useAuth } from '@/hooks/useAuth';
export type UserRole = 'admin' | 'moderator' | 'user';
export type UserRole = 'admin' | 'moderator' | 'user' | 'superuser';
export interface UserPermissions {
can_ban_any_user: boolean;
can_manage_admin_roles: boolean;
can_manage_moderator_roles: boolean;
can_view_all_profiles: boolean;
can_assign_superuser: boolean;
role_level: string;
}
export function useUserRole() {
const { user } = useAuth();
const [roles, setRoles] = useState<UserRole[]>([]);
const [permissions, setPermissions] = useState<UserPermissions | null>(null);
const [loading, setLoading] = useState(true);
useEffect(() => {
@@ -18,20 +28,33 @@ export function useUserRole() {
const fetchRoles = async () => {
try {
const { data, error } = await supabase
// Fetch user roles
const { data: rolesData, error: rolesError } = await supabase
.from('user_roles')
.select('role')
.eq('user_id', user.id);
if (error) {
console.error('Error fetching user roles:', error);
if (rolesError) {
console.error('Error fetching user roles:', rolesError);
setRoles([]);
} else {
setRoles(data?.map(r => r.role as UserRole) || []);
setRoles(rolesData?.map(r => r.role as UserRole) || []);
}
// Fetch user permissions using the new function
const { data: permissionsData, error: permissionsError } = await supabase
.rpc('get_user_management_permissions', { _user_id: user.id });
if (permissionsError) {
console.error('Error fetching user permissions:', permissionsError);
setPermissions(null);
} else {
setPermissions(permissionsData as unknown as UserPermissions);
}
} catch (error) {
console.error('Error fetching user roles:', error);
setRoles([]);
setPermissions(null);
} finally {
setLoading(false);
}
@@ -41,14 +64,17 @@ export function useUserRole() {
}, [user]);
const hasRole = (role: UserRole) => roles.includes(role);
const isModerator = () => hasRole('admin') || hasRole('moderator');
const isAdmin = () => hasRole('admin');
const isModerator = () => hasRole('admin') || hasRole('moderator') || hasRole('superuser');
const isAdmin = () => hasRole('admin') || hasRole('superuser');
const isSuperuser = () => hasRole('superuser');
return {
roles,
permissions,
loading,
hasRole,
isModerator,
isAdmin
isAdmin,
isSuperuser
};
}