From bf614fd782d8b9e7d8685e660dfc0a4c981038f1 Mon Sep 17 00:00:00 2001
From: Rotimi Best <best@classroomio.com>
Date: Fri, 5 Dec 2025 06:07:39 +0100
Subject: [PATCH] fix: update profile visibility policies to restrict access to
 user profiles

---
 .../20251205045310_mofify_profile_policy.sql           |  1 -
 .../20251205045311_modify_profile_policy.sql           | 10 ++++++++++
 2 files changed, 10 insertions(+), 1 deletion(-)
 delete mode 100644 supabase/migrations/20251205045310_mofify_profile_policy.sql
 create mode 100644 supabase/migrations/20251205045311_modify_profile_policy.sql

diff --git a/supabase/migrations/20251205045310_mofify_profile_policy.sql b/supabase/migrations/20251205045310_mofify_profile_policy.sql
deleted file mode 100644
index 7f67be7e..00000000
--- a/supabase/migrations/20251205045310_mofify_profile_policy.sql
+++ /dev/null
@@ -1 +0,0 @@
-DROP POLICY "Public profiles are viewable by everyone." ON "public"."profile";
\ No newline at end of file
diff --git a/supabase/migrations/20251205045311_modify_profile_policy.sql b/supabase/migrations/20251205045311_modify_profile_policy.sql
new file mode 100644
index 00000000..9e4232a0
--- /dev/null
+++ b/supabase/migrations/20251205045311_modify_profile_policy.sql
@@ -0,0 +1,10 @@
+drop policy if exists "Public profiles are viewable by everyone." on "public"."profile";
+
+drop policy if exists "Only auth users can read profile" on "public"."profile";
+
+create policy "You can only view your own profile"
+on "public"."profile"
+as permissive
+for select
+to authenticated, anon
+using ((auth.uid() = id));