Skip to content

Commit 1bf8d13

Browse files
committed
fix rls security bugs
1 parent 4ba0306 commit 1bf8d13

1 file changed

Lines changed: 7 additions & 0 deletions

File tree

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
-- Fix: extraction_progress and github_import_progress were created without RLS,
2+
-- leaving all rows readable and writable by anonymous users.
3+
-- Enabling RLS with no policies blocks anon/authenticated access entirely;
4+
-- service_role bypasses RLS by default and retains full access.
5+
6+
ALTER TABLE public.extraction_progress ENABLE ROW LEVEL SECURITY;
7+
ALTER TABLE public.github_import_progress ENABLE ROW LEVEL SECURITY;

0 commit comments

Comments
 (0)