@lastbrain/app 2.0.18 → 2.0.21

package/dist/templates/migrations/20201010100000_init.sql

@@ -1,123 +0,0 @@
-
--- ===========================================================================
--- Helper: is_superadmin (if not already present)
--- ===========================================================================
-CREATE OR REPLACE FUNCTION public.is_superadmin(user_id uuid)
-RETURNS boolean
-LANGUAGE sql
-STABLE
-SECURITY DEFINER
-SET search_path = public, auth
-AS $function$
-	SELECT COALESCE((
-		SELECT
-			COALESCE((raw_app_meta_data ->> 'is_super_admin')::boolean, FALSE)
-			OR COALESCE((raw_user_meta_data ->> 'is_super_admin')::boolean, FALSE)
-			OR COALESCE((raw_app_meta_data -> 'roles') ? 'admin', FALSE)
-			OR COALESCE((raw_user_meta_data -> 'roles') ? 'admin', FALSE)
-		FROM auth.users
-		WHERE id = user_id
-	), FALSE);
-$function$;
-
-REVOKE ALL ON FUNCTION public.is_superadmin(uuid) FROM PUBLIC;
-GRANT EXECUTE ON FUNCTION public.is_superadmin(uuid) TO authenticated, service_role, anon;
-
-
-
--- ===========================================================================
--- Storage Buckets (for avatars and file storage)
--- ===========================================================================
-INSERT INTO storage.buckets (id, name, public)
-VALUES ('avatar', 'avatar', TRUE)
-ON CONFLICT (id) DO NOTHING;
-
-INSERT INTO storage.buckets (id, name, public)
-VALUES ('app', 'app', FALSE)
-ON CONFLICT (id) DO NOTHING;
-
--- ===========================================================================
--- Avatar bucket policies
--- ===========================================================================
-DROP POLICY IF EXISTS avatar_public_read ON storage.objects;
-CREATE POLICY avatar_public_read ON storage.objects
-  FOR SELECT USING (bucket_id = 'avatar');
-
-DROP POLICY IF EXISTS avatar_insert_owner ON storage.objects;
-CREATE POLICY avatar_insert_owner ON storage.objects
-  FOR INSERT WITH CHECK (
-    bucket_id = 'avatar' AND (
-      owner = auth.uid() OR public.is_superadmin(auth.uid())
-    )
-  );
-
-DROP POLICY IF EXISTS avatar_manage_owner ON storage.objects;
-CREATE POLICY avatar_manage_owner ON storage.objects
-  FOR UPDATE USING (
-    bucket_id = 'avatar' AND (
-      owner = auth.uid() OR public.is_superadmin(auth.uid())
-    )
-  )
-  WITH CHECK (
-    bucket_id = 'avatar' AND (
-      owner = auth.uid() OR public.is_superadmin(auth.uid())
-    )
-  );
-
-DROP POLICY IF EXISTS avatar_delete_owner ON storage.objects;
-CREATE POLICY avatar_delete_owner ON storage.objects
-  FOR DELETE USING (
-    bucket_id = 'avatar' AND (
-      owner = auth.uid() OR public.is_superadmin(auth.uid())
-    )
-  );
-
--- ===========================================================================
--- App bucket policies (per-user folders app/{uuid})
--- ===========================================================================
-DROP POLICY IF EXISTS app_user_select ON storage.objects;
-CREATE POLICY app_user_select ON storage.objects
-  FOR SELECT USING (
-    bucket_id = 'app' AND (
-      owner = auth.uid()
-      OR split_part(name, '/', 1) = auth.uid()::text
-      OR public.is_superadmin(auth.uid())
-    )
-  );
-
-DROP POLICY IF EXISTS app_user_insert ON storage.objects;
-CREATE POLICY app_user_insert ON storage.objects
-  FOR INSERT WITH CHECK (
-    bucket_id = 'app' AND (
-      split_part(name, '/', 1) = auth.uid()::text
-      OR owner = auth.uid()
-      OR public.is_superadmin(auth.uid())
-    )
-  );
-
-DROP POLICY IF EXISTS app_user_manage ON storage.objects;
-CREATE POLICY app_user_manage ON storage.objects
-  FOR UPDATE USING (
-    bucket_id = 'app' AND (
-      owner = auth.uid()
-      OR split_part(name, '/', 1) = auth.uid()::text
-      OR public.is_superadmin(auth.uid())
-    )
-  )
-  WITH CHECK (
-    bucket_id = 'app' AND (
-      owner = auth.uid()
-      OR split_part(name, '/', 1) = auth.uid()::text
-      OR public.is_superadmin(auth.uid())
-    )
-  );
-
-DROP POLICY IF EXISTS app_user_delete ON storage.objects;
-CREATE POLICY app_user_delete ON storage.objects
-  FOR DELETE USING (
-    bucket_id = 'app' AND (
-      owner = auth.uid()
-      OR split_part(name, '/', 1) = auth.uid()::text
-      OR public.is_superadmin(auth.uid())
-    )
-  );