Enforce RLS when user opted in to MFA. (#188)

* Allow Super Admin to view tables using RLS
* Replace previous usages of the Admin client using the authed client using the new RLS
* Enforce MFA for Super Admin users
* Enforce RLS when user opted in to MFA.
* Add Super Admin Access Policies and Update Database Types
* Consolidate super admin logic into a single function that uses the RPC is_super_admin
* Added Super Admin E2E tests
* Fixes and improvements
* Bump version to 2.5.0
This commit is contained in:
Giancarlo Buomprisco
2025-03-02 10:21:01 +07:00
committed by GitHub
parent 9cf7bf0aac
commit 131b1061e6
61 changed files with 2193 additions and 302 deletions

View File

@@ -858,6 +858,14 @@ export type Database = {
};
Returns: boolean;
};
install_extensions: {
Args: Record<PropertyKey, never>;
Returns: undefined;
};
is_aal2: {
Args: Record<PropertyKey, never>;
Returns: boolean;
};
is_account_owner: {
Args: {
account_id: string;
@@ -870,12 +878,20 @@ export type Database = {
};
Returns: boolean;
};
is_mfa_compliant: {
Args: Record<PropertyKey, never>;
Returns: boolean;
};
is_set: {
Args: {
field_name: string;
};
Returns: boolean;
};
is_super_admin: {
Args: Record<PropertyKey, never>;
Returns: boolean;
};
is_team_member: {
Args: {
account_id: string;