Spaces:
Running
Running
File size: 2,764 Bytes
03bff6f |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 |
/*
# Storage and File Management Policies
1. New Tables
- No new tables created
2. Security
- Enable RLS on codette_files table
- Add policies for authenticated users to read files
- Add policies for authenticated users to insert files
- Add special policy for admin users to insert files
3. Changes
- Ensures storage bucket exists for file storage
*/
-- Enable RLS on the codette_files table if not already enabled
DO $$
BEGIN
IF NOT EXISTS (
SELECT 1 FROM pg_tables
WHERE tablename = 'codette_files'
AND rowsecurity = true
) THEN
ALTER TABLE public.codette_files ENABLE ROW LEVEL SECURITY;
END IF;
END $$;
-- Create storage bucket if it doesn't exist
DO $$
BEGIN
IF NOT EXISTS (
SELECT 1 FROM storage.buckets WHERE name = 'codette-files'
) THEN
INSERT INTO storage.buckets (id, name)
VALUES ('codette-files', 'codette-files');
END IF;
END $$;
-- Create policies for the codette_files table
DO $$
BEGIN
-- Check if the read policy exists
IF NOT EXISTS (
SELECT 1 FROM pg_policies
WHERE policyname = 'Allow authenticated users to read files'
AND tablename = 'codette_files'
) THEN
CREATE POLICY "Allow authenticated users to read files"
ON public.codette_files FOR SELECT
TO authenticated
USING (true);
END IF;
-- Check if the admin insert policy exists
IF NOT EXISTS (
SELECT 1 FROM pg_policies
WHERE policyname = 'Allow admin users to insert files'
AND tablename = 'codette_files'
) THEN
CREATE POLICY "Allow admin users to insert files"
ON public.codette_files FOR INSERT
TO authenticated
WITH CHECK (auth.jwt() ->> 'role' = 'admin');
END IF;
-- Check if the authenticated insert policy exists
IF NOT EXISTS (
SELECT 1 FROM pg_policies
WHERE policyname = 'Allow authenticated users to insert files'
AND tablename = 'codette_files'
) THEN
CREATE POLICY "Allow authenticated users to insert files"
ON public.codette_files FOR INSERT
TO authenticated
WITH CHECK (true);
END IF;
END $$;
-- Note: Storage policies for the storage.objects table need to be created through the Supabase dashboard
-- or using the Supabase CLI, as they require special permissions that aren't available in migrations.
-- Please create the following policies manually:
-- 1. "Allow authenticated users to read files" - For SELECT operations on storage.objects where bucket_id = 'codette-files'
-- 2. "Allow admin users to upload files" - For INSERT operations on storage.objects where bucket_id = 'codette-files' AND auth.jwt() ->> 'role' = 'admin' |