docs: remove unused user_id param (#21939)

* docs: remove unused user_id param

* mark fn STABLE not IMMUTABLE

* chore: update throughout.

---------

Co-authored-by: thorwebdev <thor@supabase.io>
Co-authored-by: Thor 雷神 Schaeff <5748289+thorwebdev@users.noreply.github.com>
This commit is contained in:
authored and GitHub committed 2024-03-27 09:11:11 +00:00
1 parent 7d1911bb3d
commit 5215a993af
4 files changed
+12 -15

No files matched your search

@@ -55,8 +55,7 @@ comment on table public.role_permissions is 'Application permissions for each ro
-- authorize with role-based access control (RBAC)
create function public.authorize(
requested_permission app_permission,
user_id uuid
requested_permission app_permission
)
returns boolean as $$
declare
@@ -84,12 +83,12 @@ create policy "Allow individual update access" on public.users for update using
create policy "Allow logged-in read access" on public.channels for select using ( auth.role() = 'authenticated' );
create policy "Allow individual insert access" on public.channels for insert with check ( auth.uid() = created_by );
create policy "Allow individual delete access" on public.channels for delete using ( auth.uid() = created_by );
create policy "Allow authorized delete access" on public.channels for delete using ( authorize('channels.delete', auth.uid()) );
create policy "Allow authorized delete access" on public.channels for delete using ( authorize('channels.delete') );
create policy "Allow logged-in read access" on public.messages for select using ( auth.role() = 'authenticated' );
create policy "Allow individual insert access" on public.messages for insert with check ( auth.uid() = user_id );
create policy "Allow individual update access" on public.messages for update using ( auth.uid() = user_id );
create policy "Allow individual delete access" on public.messages for delete using ( auth.uid() = user_id );
create policy "Allow authorized delete access" on public.messages for delete using ( authorize('messages.delete', auth.uid()) );
create policy "Allow authorized delete access" on public.messages for delete using ( authorize('messages.delete') );
create policy "Allow individual read access" on public.user_roles for select using ( auth.uid() = user_id );
-- Send "previous data" on change
@@ -150,7 +149,7 @@ alter publication supabase_realtime add table public.users;
create or replace function public.custom_access_token_hook(event jsonb)
returns jsonb
language plpgsql
immutable
stable
as $$
declare
claims jsonb;
@@ -55,8 +55,7 @@ comment on table public.role_permissions is 'Application permissions for each ro
-- authorize with role-based access control (RBAC)
create function public.authorize(
requested_permission app_permission,
user_id uuid
requested_permission app_permission
)
returns boolean as $$
declare
@@ -84,12 +83,12 @@ create policy "Allow individual update access" on public.users for update using
create policy "Allow logged-in read access" on public.channels for select using ( auth.role() = 'authenticated' );
create policy "Allow individual insert access" on public.channels for insert with check ( auth.uid() = created_by );
create policy "Allow individual delete access" on public.channels for delete using ( auth.uid() = created_by );
create policy "Allow authorized delete access" on public.channels for delete using ( authorize('channels.delete', auth.uid()) );
create policy "Allow authorized delete access" on public.channels for delete using ( authorize('channels.delete') );
create policy "Allow logged-in read access" on public.messages for select using ( auth.role() = 'authenticated' );
create policy "Allow individual insert access" on public.messages for insert with check ( auth.uid() = user_id );
create policy "Allow individual update access" on public.messages for update using ( auth.uid() = user_id );
create policy "Allow individual delete access" on public.messages for delete using ( auth.uid() = user_id );
create policy "Allow authorized delete access" on public.messages for delete using ( authorize('messages.delete', auth.uid()) );
create policy "Allow authorized delete access" on public.messages for delete using ( authorize('messages.delete') );
create policy "Allow individual read access" on public.user_roles for select using ( auth.uid() = user_id );
-- Send "previous data" on change
@@ -8,7 +8,7 @@
create or replace function public.custom_access_token_hook(event jsonb)
returns jsonb
language plpgsql
immutable
stable
as $$
declare
claims jsonb;