fix: update profile visibility policies to restrict access to user profiles
This commit is contained in:
@@ -1 +0,0 @@
|
||||
DROP POLICY "Public profiles are viewable by everyone." ON "public"."profile";
|
||||
@@ -0,0 +1,10 @@
|
||||
drop policy if exists "Public profiles are viewable by everyone." on "public"."profile";
|
||||
|
||||
drop policy if exists "Only auth users can read profile" on "public"."profile";
|
||||
|
||||
create policy "You can only view your own profile"
|
||||
on "public"."profile"
|
||||
as permissive
|
||||
for select
|
||||
to authenticated, anon
|
||||
using ((auth.uid() = id));
|
||||
Reference in New Issue
Block a user