From fbd30a4ee88f3b5c1453be0f265a7df767aa9323 Mon Sep 17 00:00:00 2001
From: "gpt-engineer-app[bot]"
 <159125892+gpt-engineer-app[bot]@users.noreply.github.com>
Date: Fri, 8 May 2026 17:08:55 +0000
Subject: [PATCH] Changes

Co-authored-by: renee-png <262607627+renee-png@users.noreply.github.com>
---
 ...1_6c45a9d4-eaef-454c-8693-7ebd646679a4.sql | 29 +++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 supabase/migrations/20260508170851_6c45a9d4-eaef-454c-8693-7ebd646679a4.sql

diff --git a/supabase/migrations/20260508170851_6c45a9d4-eaef-454c-8693-7ebd646679a4.sql b/supabase/migrations/20260508170851_6c45a9d4-eaef-454c-8693-7ebd646679a4.sql
new file mode 100644
index 0000000..bbf5b70
--- /dev/null
+++ b/supabase/migrations/20260508170851_6c45a9d4-eaef-454c-8693-7ebd646679a4.sql
@@ -0,0 +1,29 @@
+-- Allow team members (and originating attorney) to view and update their cases
+DROP POLICY IF EXISTS cases_select_assigned ON public.cases;
+DROP POLICY IF EXISTS cases_update_assigned ON public.cases;
+
+CREATE POLICY cases_select_assigned ON public.cases
+FOR SELECT
+USING (
+  public.is_admin(auth.uid())
+  OR assigned_attorney_id = auth.uid()
+  OR created_by = auth.uid()
+  OR originating_attorney_id = auth.uid()
+  OR EXISTS (
+    SELECT 1 FROM public.case_team_members tm
+    WHERE tm.case_id = cases.id AND tm.user_id = auth.uid()
+  )
+);
+
+CREATE POLICY cases_update_assigned ON public.cases
+FOR UPDATE
+USING (
+  public.is_admin(auth.uid())
+  OR assigned_attorney_id = auth.uid()
+  OR created_by = auth.uid()
+  OR originating_attorney_id = auth.uid()
+  OR EXISTS (
+    SELECT 1 FROM public.case_team_members tm
+    WHERE tm.case_id = cases.id AND tm.user_id = auth.uid()
+  )
+);
\ No newline at end of file