From acda1db0ad89d70cababbf89cd57f219aa7f808f Mon Sep 17 00:00:00 2001 From: "Snow@Moana" Date: Wed, 17 Jun 2026 06:28:16 +1000 Subject: [PATCH] Enable row level security at Supabase to quiet warnings. --- db/migrations/0013_enable_rls.sql | 26 ++++++++++++++++++++++++++ db/migrations/meta/_journal.json | 7 +++++++ 2 files changed, 33 insertions(+) create mode 100644 db/migrations/0013_enable_rls.sql diff --git a/db/migrations/0013_enable_rls.sql b/db/migrations/0013_enable_rls.sql new file mode 100644 index 000000000..0f5d5d343 --- /dev/null +++ b/db/migrations/0013_enable_rls.sql @@ -0,0 +1,26 @@ +-- Enable Row Level Security on all public tables. +-- The app connects via the postgres superuser (DATABASE_URL), which bypasses RLS, +-- so no policies are needed. This blocks direct API access via the anon/authenticated roles. +ALTER TABLE "user" ENABLE ROW LEVEL SECURITY; +--> statement-breakpoint +ALTER TABLE "account" ENABLE ROW LEVEL SECURITY; +--> statement-breakpoint +ALTER TABLE "session" ENABLE ROW LEVEL SECURITY; +--> statement-breakpoint +ALTER TABLE "verification" ENABLE ROW LEVEL SECURITY; +--> statement-breakpoint +ALTER TABLE "github_installation_token" ENABLE ROW LEVEL SECURITY; +--> statement-breakpoint +ALTER TABLE "collaborator" ENABLE ROW LEVEL SECURITY; +--> statement-breakpoint +ALTER TABLE "collaborator_invite" ENABLE ROW LEVEL SECURITY; +--> statement-breakpoint +ALTER TABLE "config" ENABLE ROW LEVEL SECURITY; +--> statement-breakpoint +ALTER TABLE "cache_file" ENABLE ROW LEVEL SECURITY; +--> statement-breakpoint +ALTER TABLE "cache_file_meta" ENABLE ROW LEVEL SECURITY; +--> statement-breakpoint +ALTER TABLE "cache_permission" ENABLE ROW LEVEL SECURITY; +--> statement-breakpoint +ALTER TABLE "action_run" ENABLE ROW LEVEL SECURITY; diff --git a/db/migrations/meta/_journal.json b/db/migrations/meta/_journal.json index 8f67a9031..d93586dac 100644 --- a/db/migrations/meta/_journal.json +++ b/db/migrations/meta/_journal.json @@ -92,6 +92,13 @@ "when": 1778731770759, "tag": "0012_collaborator_invites", "breakpoints": true + }, + { + "idx": 13, + "version": "7", + "when": 1781654400000, + "tag": "0013_enable_rls", + "breakpoints": true } ] } \ No newline at end of file