philipp/proxui
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: enable rls on remaining public tables

Browse Source
This commit is contained in:
Philipp
2026-06-10 16:14:41 +02:00
parent a22c1a4171
commit d87d8c6be7
4 changed files with 27 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
migrations/0009_rls_advisor_cleanup.down.sql
+8
View File
@@ -0,0 +1,8 @@
DROP POLICY IF EXISTS profiles_self_update ON public.profiles;
DROP POLICY IF EXISTS profiles_self_select ON public.profiles;
ALTER TABLE public.vmid_reservations DISABLE ROW LEVEL SECURITY;
ALTER TABLE public.cluster_vmid_allocators DISABLE ROW LEVEL SECURITY;
ALTER TABLE public.clusters DISABLE ROW LEVEL SECURITY;
ALTER TABLE public.profiles DISABLE ROW LEVEL SECURITY;
ALTER TABLE public.schema_migrations DISABLE ROW LEVEL SECURITY;
migrations/0009_rls_advisor_cleanup.up.sql
+16
View File
@@ -0,0 +1,16 @@
ALTER TABLE public.schema_migrations ENABLE ROW LEVEL SECURITY;
ALTER TABLE public.profiles ENABLE ROW LEVEL SECURITY;
ALTER TABLE public.clusters ENABLE ROW LEVEL SECURITY;
ALTER TABLE public.cluster_vmid_allocators ENABLE ROW LEVEL SECURITY;
ALTER TABLE public.vmid_reservations ENABLE ROW LEVEL SECURITY;
CREATE POLICY profiles_self_select
ON public.profiles
FOR SELECT
USING (id = public.current_profile_id());
CREATE POLICY profiles_self_update
ON public.profiles
FOR UPDATE
USING (id = public.current_profile_id())
WITH CHECK (id = public.current_profile_id());