Spaces:
Running
Running
File size: 2,779 Bytes
03bff6f |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 |
/*
# Storage and File Management Setup
1. New Storage
- Create 'codette-files' storage bucket if it doesn't exist
2. Security
- Enable Row Level Security on codette_files table
- Create policies for authenticated users to read files
- Create policies for authenticated users to insert files
- Create special policy for admin users to insert files
*/
-- Enable RLS on the codette_files table if not already enabled
DO $$
BEGIN
IF NOT EXISTS (
SELECT 1 FROM pg_tables
WHERE tablename = 'codette_files'
AND rowsecurity = true
) THEN
ALTER TABLE public.codette_files ENABLE ROW LEVEL SECURITY;
END IF;
END $$;
-- Create storage bucket if it doesn't exist
DO $$
BEGIN
IF NOT EXISTS (
SELECT 1 FROM storage.buckets WHERE name = 'codette-files'
) THEN
INSERT INTO storage.buckets (id, name)
VALUES ('codette-files', 'codette-files');
END IF;
END $$;
-- Create policies for the codette_files table
DO $$
BEGIN
-- Check if the read policy exists
IF NOT EXISTS (
SELECT 1 FROM pg_policies
WHERE policyname = 'Allow authenticated users to read files'
AND tablename = 'codette_files'
) THEN
CREATE POLICY "Allow authenticated users to read files"
ON public.codette_files FOR SELECT
TO authenticated
USING (true);
END IF;
-- Check if the admin insert policy exists
IF NOT EXISTS (
SELECT 1 FROM pg_policies
WHERE policyname = 'Allow admin users to insert files'
AND tablename = 'codette_files'
) THEN
CREATE POLICY "Allow admin users to insert files"
ON public.codette_files FOR INSERT
TO authenticated
WITH CHECK ((auth.jwt() ->> 'role')::text = 'admin');
END IF;
-- Check if the authenticated insert policy exists
IF NOT EXISTS (
SELECT 1 FROM pg_policies
WHERE policyname = 'Allow authenticated users to insert files'
AND tablename = 'codette_files'
) THEN
CREATE POLICY "Allow authenticated users to insert files"
ON public.codette_files FOR INSERT
TO authenticated
WITH CHECK (true);
END IF;
END $$;
-- Note: For storage.objects policies, you'll need to create them through the Supabase dashboard
-- as migrations don't have sufficient permissions to create these policies directly.
-- Create these policies manually:
-- 1. Policy name: "Allow authenticated users to read files"
-- - For: SELECT operations
-- - Using expression: bucket_id = 'codette-files'
--
-- 2. Policy name: "Allow admin users to upload files"
-- - For: INSERT operations
-- - Using expression: bucket_id = 'codette-files' AND (auth.jwt() ->> 'role')::text = 'admin' |