From 085b9ecd67f4dec22df1410e4de9f86e416d5855 Mon Sep 17 00:00:00 2001
From: "gpt-engineer-app[bot]"
 <159125892+gpt-engineer-app[bot]@users.noreply.github.com>
Date: Tue, 28 Apr 2026 01:46:31 +0000
Subject: [PATCH] Changes

Co-authored-by: renee-png <262607627+renee-png@users.noreply.github.com>
---
 ...4628_a4a279b9-8d02-46f2-b2f1-d185708beb2b.sql | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 supabase/migrations/20260428014628_a4a279b9-8d02-46f2-b2f1-d185708beb2b.sql

diff --git a/supabase/migrations/20260428014628_a4a279b9-8d02-46f2-b2f1-d185708beb2b.sql b/supabase/migrations/20260428014628_a4a279b9-8d02-46f2-b2f1-d185708beb2b.sql
new file mode 100644
index 0000000..6fb0f11
--- /dev/null
+++ b/supabase/migrations/20260428014628_a4a279b9-8d02-46f2-b2f1-d185708beb2b.sql
@@ -0,0 +1,16 @@
+DROP POLICY IF EXISTS trust_ledger_select ON public.trust_ledger_entries;
+
+CREATE POLICY trust_ledger_select
+  ON public.trust_ledger_entries
+  FOR SELECT
+  TO authenticated
+  USING (
+    public.is_admin(auth.uid())
+    OR (case_id IS NOT NULL AND public.can_access_case(case_id, auth.uid()))
+    OR (case_id IS NULL AND client_id IS NOT NULL AND EXISTS (
+      SELECT 1 FROM public.clients c
+      WHERE c.id = trust_ledger_entries.client_id
+        AND (c.created_by = auth.uid())
+    ))
+    OR created_by = auth.uid()
+  );
\ No newline at end of file