From a90862759efa5acb1bf512048b3e5965f04e64c0 Mon Sep 17 00:00:00 2001 From: admin Date: Sat, 22 Aug 2026 23:10:52 +0000 Subject: [PATCH] Terminal --- ...0260719213115_lock_student_data_admin_only.sql | 15 --------------- 1 file changed, 15 deletions(-) delete mode 100644 supabase/migrations/20260719213115_lock_student_data_admin_only.sql diff --git a/supabase/migrations/20260719213115_lock_student_data_admin_only.sql b/supabase/migrations/20260719213115_lock_student_data_admin_only.sql deleted file mode 100644 index c246fd0..0000000 --- a/supabase/migrations/20260719213115_lock_student_data_admin_only.sql +++ /dev/null @@ -1,15 +0,0 @@ --- Student profile data (guardians, pickups, curriculum logins) is admin-edit-only. --- Reads are unchanged (parents/teachers/students keep their "... read" policies); --- the students table itself is already admin-write via "admins manage students". - -DROP POLICY IF EXISTS "guardians write parent or admin" ON public.student_guardians; -CREATE POLICY "guardians write admin" ON public.student_guardians FOR ALL TO authenticated - USING (public.current_user_has_role('admin')) WITH CHECK (public.current_user_has_role('admin')); - -DROP POLICY IF EXISTS "pickups write parent or admin" ON public.authorized_pickups; -CREATE POLICY "pickups write admin" ON public.authorized_pickups FOR ALL TO authenticated - USING (public.current_user_has_role('admin')) WITH CHECK (public.current_user_has_role('admin')); - -DROP POLICY IF EXISTS "curriculum write parent or admin" ON public.student_curriculum_logins; -CREATE POLICY "curriculum write admin" ON public.student_curriculum_logins FOR ALL TO authenticated - USING (public.current_user_has_role('admin')) WITH CHECK (public.current_user_has_role('admin'));