Files
acmcc/supabase/migrations/20260428030006_02298cdb-8e85-4750-8976-f9d2ea14d202.sql
2026-06-01 20:19:26 -04:00

13 lines
435 B
SQL

CREATE POLICY "Board members can upload invoices"
ON storage.objects FOR INSERT TO authenticated
WITH CHECK (
bucket_id = 'invoices'
AND EXISTS (SELECT 1 FROM public.board_members bm WHERE bm.user_id = auth.uid())
);
CREATE POLICY "Board members can read invoices"
ON storage.objects FOR SELECT TO authenticated
USING (
bucket_id = 'invoices'
AND EXISTS (SELECT 1 FROM public.board_members bm WHERE bm.user_id = auth.uid())
);