Enforce RLS when user opted in to MFA. (#188)
* Allow Super Admin to view tables using RLS * Replace previous usages of the Admin client using the authed client using the new RLS * Enforce MFA for Super Admin users * Enforce RLS when user opted in to MFA. * Add Super Admin Access Policies and Update Database Types * Consolidate super admin logic into a single function that uses the RPC is_super_admin * Added Super Admin E2E tests * Fixes and improvements * Bump version to 2.5.0
This commit is contained in:
committed by
GitHub
parent
9cf7bf0aac
commit
131b1061e6
@@ -12,7 +12,7 @@ select tests.create_supabase_user('test2');
|
||||
------------
|
||||
--- Primary Owner
|
||||
------------
|
||||
select tests.authenticate_as('test1');
|
||||
select makerkit.authenticate_as('test1');
|
||||
|
||||
-- should create the personal account automatically with the same ID as the user
|
||||
SELECT row_eq(
|
||||
@@ -32,7 +32,7 @@ SELECT throws_ok(
|
||||
|
||||
-- the primary owner should be able to see the personal account
|
||||
|
||||
select tests.authenticate_as('test1');
|
||||
select makerkit.authenticate_as('test1');
|
||||
|
||||
SELECT isnt_empty(
|
||||
$$ select * from public.accounts where primary_owner_user_id = tests.get_supabase_uid('test1') $$,
|
||||
@@ -44,7 +44,7 @@ SELECT isnt_empty(
|
||||
|
||||
-- other users should not be able to see the personal account
|
||||
|
||||
select tests.authenticate_as('test2');
|
||||
select makerkit.authenticate_as('test2');
|
||||
|
||||
SELECT is_empty(
|
||||
$$ select * from public.accounts where primary_owner_user_id = tests.get_supabase_uid('test1') $$,
|
||||
|
||||
Reference in New Issue
Block a user