admin/info-share-spot
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Modified by www.SourceFiles.app

Browse Source
This commit is contained in:
admin
2026-08-07 04:12:07 +00:00
parent ca0b1327ab
commit b14a5c527a
1 changed files with 0 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files
supabase/migrations/20260719201049_student_photo.sql
-26
View File
@@ -1,26 +0,0 @@
-- Student photo: a column for the stored path + a private storage bucket.
ALTER TABLE public.students ADD COLUMN IF NOT EXISTS photo_path TEXT;
INSERT INTO storage.buckets (id, name, public)
VALUES ('student-photos', 'student-photos', false)
ON CONFLICT (id) DO NOTHING;
-- Admins upload/replace/remove photos.
CREATE POLICY "student photos admin write" ON storage.objects FOR INSERT TO authenticated
WITH CHECK (bucket_id = 'student-photos' AND public.current_user_has_role('admin'));
CREATE POLICY "student photos admin update" ON storage.objects FOR UPDATE TO authenticated
USING (bucket_id = 'student-photos' AND public.current_user_has_role('admin'));
CREATE POLICY "student photos admin delete" ON storage.objects FOR DELETE TO authenticated
USING (bucket_id = 'student-photos' AND public.current_user_has_role('admin'));
-- Read: admins, the student's teacher, or the student's parent.
-- Path convention is "<student_id>/<filename>", so folder[1] is the student id.
CREATE POLICY "student photos read" ON storage.objects FOR SELECT TO authenticated
USING (
bucket_id = 'student-photos' AND (
public.current_user_has_role('admin')
OR public.is_parent_of(((storage.foldername(name))[1])::uuid)
OR public.teaches_student(((storage.foldername(name))[1])::uuid)
)
);