caterium/caterium-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Harden Supabase advisor findings

Browse Source
This commit is contained in:
pavlov346346-source 2026-09-11 07:45:08 +03:00 committed by GitHub
parent 5e38bf867b
commit fccea79255
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
ops/sql/SUPABASE-V17.7.4-ADVISOR-HARDENING.sql Normal file
View File

@ -0,0 +1,23 @@
begin;
-- Keep the same RLS semantics while evaluating auth.uid() once per statement.
alter policy sun_chat_reads_read_v29 on public.sun_chat_reads
using ((user_id = (select auth.uid())) and public.sun_chat_can_access_thread_v29(thread_id));
-- Cover foreign keys used by chat joins/deletes.
create index if not exists sun_chat_messages_sender_user_id_idx on public.sun_chat_messages(sender_user_id);
create index if not exists sun_chat_participants_workspace_id_idx on public.sun_chat_participants(workspace_id);
create index if not exists sun_chat_reads_workspace_id_idx on public.sun_chat_reads(workspace_id);
create index if not exists sun_chat_threads_created_by_idx on public.sun_chat_threads(created_by);
-- Remove exact duplicate indexes, retaining the clearer canonical names.
drop index if exists public.sun_v17_error_workspace_created_idx;
drop index if exists public.sun_v17_orders_due_idx;
-- Server order automation is for signed-in workspace members only.
revoke execute on function public.sun_run_order_automation(uuid) from public;
revoke execute on function public.sun_run_order_automation(uuid) from anon;
grant execute on function public.sun_run_order_automation(uuid) to authenticated;
grant execute on function public.sun_run_order_automation(uuid) to service_role;
commit;