fix: update profile visibility policies to restrict access to user profiles
This commit is contained in:
@@ -1 +0,0 @@
|
|||||||
DROP POLICY "Public profiles are viewable by everyone." ON "public"."profile";
|
|
||||||
@@ -0,0 +1,10 @@
|
|||||||
|
drop policy if exists "Public profiles are viewable by everyone." on "public"."profile";
|
||||||
|
|
||||||
|
drop policy if exists "Only auth users can read profile" on "public"."profile";
|
||||||
|
|
||||||
|
create policy "You can only view your own profile"
|
||||||
|
on "public"."profile"
|
||||||
|
as permissive
|
||||||
|
for select
|
||||||
|
to authenticated, anon
|
||||||
|
using ((auth.uid() = id));
|
||||||
Reference in New Issue
Block a user