From 9e102596302c4382d08c65732f0c007b311d0aca Mon Sep 17 00:00:00 2001 From: Rotimi Best Date: Mon, 19 Aug 2024 20:00:57 +0100 Subject: [PATCH] fix: allow admin edit organization --- supabase/migrations/20240717053936_rls.sql | 13 +++++-------- 1 file changed, 5 insertions(+), 8 deletions(-) diff --git a/supabase/migrations/20240717053936_rls.sql b/supabase/migrations/20240717053936_rls.sql index 9d2590bc..b49ebef2 100644 --- a/supabase/migrations/20240717053936_rls.sql +++ b/supabase/migrations/20240717053936_rls.sql @@ -983,20 +983,17 @@ with check ((id = ( SELECT organizationmember.organization_id LIMIT 1))); -create policy "User must be an admin to UPDATE" +create policy "User must be admin to UPDATE" on "public"."organization" as permissive for update to public -using ((id = ( SELECT organizationmember.organization_id +using ((id in ( SELECT organizationmember.organization_id FROM organizationmember - WHERE ((organizationmember.profile_id = ( SELECT auth.uid() AS uid)) AND (organizationmember.role_id = 1)) - LIMIT 1))) -with check ((id = ( SELECT organizationmember.organization_id + WHERE ((organizationmember.profile_id = ( SELECT auth.uid() AS uid)) AND (organizationmember.role_id = 1))))) +with check ((id in ( SELECT organizationmember.organization_id FROM organizationmember - WHERE ((organizationmember.profile_id = ( SELECT auth.uid() AS uid)) AND (organizationmember.role_id = 1)) - LIMIT 1))); - + WHERE ((organizationmember.profile_id = ( SELECT auth.uid() AS uid)) AND (organizationmember.role_id = 1))))); create policy "User must be an org member to DELETE" on "public"."organization_plan"