Files
thrilltrack-explorer/supabase/migrations/20251012140656_6afd3694-2db5-4fb2-be7c-bb4967f62133.sql
2025-10-12 14:07:12 +00:00

5 lines
433 B
SQL

-- Set filtered_profiles view to use security_invoker
-- This makes the view execute with the permissions of the invoking user, not the creator
ALTER VIEW public.filtered_profiles SET (security_invoker = true);
COMMENT ON VIEW public.filtered_profiles IS 'Profile view with field-level privacy controls using security_invoker. Uses security definer functions for granular permission checks but view respects querying user context.';