Fix RLS

Author: MartinBraquet

backend/supabase/bookmarked_searches.sql

@@ -24,17 +24,17 @@ DROP POLICY IF EXISTS "public read" ON bookmarked_searches;
 CREATE POLICY "public read" ON bookmarked_searches
     FOR SELECT USING (true);
 
-DROP POLICY IF EXISTS "self delete" ON bookmarked_searches;
-CREATE POLICY "self delete" ON bookmarked_searches
-    FOR DELETE USING (creator_id = firebase_uid());
-
-DROP POLICY IF EXISTS "self insert" ON bookmarked_searches;
-CREATE POLICY "self insert" ON bookmarked_searches
-    FOR INSERT WITH CHECK (creator_id = firebase_uid());
-
-DROP POLICY IF EXISTS "self update" ON bookmarked_searches;
-CREATE POLICY "self update" ON bookmarked_searches
-    FOR UPDATE USING (creator_id = firebase_uid());
+-- DROP POLICY IF EXISTS "self delete" ON bookmarked_searches;
+-- CREATE POLICY "self delete" ON bookmarked_searches
+--     FOR DELETE USING (creator_id = firebase_uid());
+--
+-- DROP POLICY IF EXISTS "self insert" ON bookmarked_searches;
+-- CREATE POLICY "self insert" ON bookmarked_searches
+--     FOR INSERT WITH CHECK (creator_id = firebase_uid());
+--
+-- DROP POLICY IF EXISTS "self update" ON bookmarked_searches;
+-- CREATE POLICY "self update" ON bookmarked_searches
+--     FOR UPDATE USING (creator_id = firebase_uid());
 
 -- Indexes
 CREATE INDEX IF NOT EXISTS bookmarked_searches_creator_id_created_time_idx

backend/supabase/compatibility_answers.sql

@@ -29,17 +29,17 @@ DROP POLICY IF EXISTS "public read" ON compatibility_answers;
 CREATE POLICY "public read" ON compatibility_answers
     FOR SELECT USING (true);
 
-DROP POLICY IF EXISTS "self delete" ON compatibility_answers;
-CREATE POLICY "self delete" ON compatibility_answers
-    FOR DELETE USING (creator_id = firebase_uid());
-
-DROP POLICY IF EXISTS "self insert" ON compatibility_answers;
-CREATE POLICY "self insert" ON compatibility_answers
-    FOR INSERT WITH CHECK (creator_id = firebase_uid());
-
-DROP POLICY IF EXISTS "self update" ON compatibility_answers;
-CREATE POLICY "self update" ON compatibility_answers
-    FOR UPDATE USING (creator_id = firebase_uid());
+-- DROP POLICY IF EXISTS "self delete" ON compatibility_answers;
+-- CREATE POLICY "self delete" ON compatibility_answers
+--     FOR DELETE USING (creator_id = firebase_uid());
+--
+-- DROP POLICY IF EXISTS "self insert" ON compatibility_answers;
+-- CREATE POLICY "self insert" ON compatibility_answers
+--     FOR INSERT WITH CHECK (creator_id = firebase_uid());
+--
+-- DROP POLICY IF EXISTS "self update" ON compatibility_answers;
+-- CREATE POLICY "self update" ON compatibility_answers
+--     FOR UPDATE USING (creator_id = firebase_uid());
 
 -- Indexes
 CREATE INDEX IF NOT EXISTS compatibility_answers_creator_id_created_time_idx

backend/supabase/compatibility_prompts.sql

@@ -21,7 +21,7 @@ ALTER TABLE compatibility_prompts ENABLE ROW LEVEL SECURITY;
 -- Policies
 DROP POLICY IF EXISTS "public read" ON compatibility_prompts;
 CREATE POLICY "public read" ON compatibility_prompts
-FOR ALL USING (true);
+FOR SELECT USING (true);
 
 -- Indexes
 -- The primary key automatically creates a unique index on (id),

backend/supabase/private_user_message_channels.sql

@@ -9,12 +9,12 @@ CREATE TABLE IF NOT EXISTS private_user_message_channels (
 -- Row Level Security
 ALTER TABLE private_user_message_channels ENABLE ROW LEVEL SECURITY;
 
+
+
 -- Policies
 DROP POLICY IF EXISTS "public read" ON private_user_message_channels;
-
 CREATE POLICY "public read" ON private_user_message_channels
-    FOR ALL
-    USING (true);
+    FOR SELECT USING (true);
 
 -- Indexes
 -- Removed redundant primary key index creation because PRIMARY KEY already creates a unique index on id

backend/supabase/profile_comments.sql

@@ -26,9 +26,13 @@ ALTER TABLE profile_comments
 -- Row Level Security
 ALTER TABLE profile_comments ENABLE ROW LEVEL SECURITY;
 
+DROP POLICY IF EXISTS "public read" ON profile_comments;
+CREATE POLICY "public read" ON profile_comments
+    FOR SELECT USING (true);
+
 -- Policies
 DROP POLICY IF EXISTS "public read" ON profile_comments;
-CREATE POLICY "public read" ON profile_comments FOR ALL USING (true);
+CREATE POLICY "public read" ON profile_comments FOR SELECT USING (true);
 
 -- Indexes
 CREATE INDEX IF NOT EXISTS profile_comments_user_id_idx

backend/supabase/vote_results.sql

@@ -21,7 +21,7 @@ ALTER TABLE vote_results ENABLE ROW LEVEL SECURITY;
 -- Policies
 DROP POLICY IF EXISTS "public read" ON vote_results;
 CREATE POLICY "public read" ON vote_results
-FOR ALL USING (true);
+FOR SELECT USING (true);
 
 -- Indexes
 CREATE INDEX IF NOT EXISTS user_id_idx ON vote_results (user_id);

backend/supabase/votes.sql

@@ -17,7 +17,7 @@ ALTER TABLE votes ENABLE ROW LEVEL SECURITY;
 -- Policies
 DROP POLICY IF EXISTS "public read" ON votes;
 CREATE POLICY "public read" ON votes
-FOR ALL USING (true);
+FOR SELECT USING (true);
 
 -- Indexes
 CREATE INDEX IF NOT EXISTS creator_id_idx ON votes (creator_id);