Restricted trust ledger read

X-Lovable-Edit-ID: edt-b8b7d4a9-bf54-4260-b3b7-49158460d012 Co-authored-by: renee-png <262607627+renee-png@users.noreply.github.com>
2026-04-28 01:46:37 +00:00
parent b549380636 085b9ecd67
commit cf0e738767
1 changed files with 16 additions and 0 deletions
@@ -0,0 +1,16 @@
+DROP POLICY IF EXISTS trust_ledger_select ON public.trust_ledger_entries;
+
+CREATE POLICY trust_ledger_select
+  ON public.trust_ledger_entries
+  FOR SELECT
+  TO authenticated
+  USING (
+    public.is_admin(auth.uid())
+    OR (case_id IS NOT NULL AND public.can_access_case(case_id, auth.uid()))
+    OR (case_id IS NULL AND client_id IS NOT NULL AND EXISTS (
+      SELECT 1 FROM public.clients c
+      WHERE c.id = trust_ledger_entries.client_id
+        AND (c.created_by = auth.uid())
+    ))
+    OR created_by = auth.uid()
+  );