Changes

Co-authored-by: renee-png <262607627+renee-png@users.noreply.github.com>
2026-04-17 02:58:00 +00:00
parent ee8e57695e
commit 301dcdfe2a
2 changed files with 67 additions and 0 deletions
@@ -0,0 +1,52 @@
+-- Profile fields
+ALTER TABLE public.profiles
+  ADD COLUMN IF NOT EXISTS avatar_url text,
+  ADD COLUMN IF NOT EXISTS title text,
+  ADD COLUMN IF NOT EXISTS phone text,
+  ADD COLUMN IF NOT EXISTS bio text,
+  ADD COLUMN IF NOT EXISTS timezone text;
+
+-- Ensure RLS on profiles
+ALTER TABLE public.profiles ENABLE ROW LEVEL SECURITY;
+
+-- Recreate policies idempotently
+DROP POLICY IF EXISTS profiles_select_auth ON public.profiles;
+DROP POLICY IF EXISTS profiles_update_self_or_admin ON public.profiles;
+DROP POLICY IF EXISTS profiles_insert_self ON public.profiles;
+
+CREATE POLICY profiles_select_auth ON public.profiles
+  FOR SELECT TO authenticated USING (true);
+
+CREATE POLICY profiles_update_self_or_admin ON public.profiles
+  FOR UPDATE TO authenticated
+  USING (id = auth.uid() OR public.is_admin(auth.uid()));
+
+CREATE POLICY profiles_insert_self ON public.profiles
+  FOR INSERT TO authenticated
+  WITH CHECK (id = auth.uid() OR public.is_admin(auth.uid()));
+
+-- Avatars bucket (public)
+INSERT INTO storage.buckets (id, name, public)
+VALUES ('avatars', 'avatars', true)
+ON CONFLICT (id) DO UPDATE SET public = true;
+
+-- Storage policies for avatars
+DROP POLICY IF EXISTS "avatars_public_read" ON storage.objects;
+DROP POLICY IF EXISTS "avatars_user_insert" ON storage.objects;
+DROP POLICY IF EXISTS "avatars_user_update" ON storage.objects;
+DROP POLICY IF EXISTS "avatars_user_delete" ON storage.objects;
+
+CREATE POLICY "avatars_public_read" ON storage.objects
+  FOR SELECT USING (bucket_id = 'avatars');
+
+CREATE POLICY "avatars_user_insert" ON storage.objects
+  FOR INSERT TO authenticated
+  WITH CHECK (bucket_id = 'avatars' AND auth.uid()::text = (storage.foldername(name))[1]);
+
+CREATE POLICY "avatars_user_update" ON storage.objects
+  FOR UPDATE TO authenticated
+  USING (bucket_id = 'avatars' AND auth.uid()::text = (storage.foldername(name))[1]);
+
+CREATE POLICY "avatars_user_delete" ON storage.objects
+  FOR DELETE TO authenticated
+  USING (bucket_id = 'avatars' AND auth.uid()::text = (storage.foldername(name))[1]);