Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disallow users from viewing full accounts and organizations views #221

Merged
merged 6 commits into from
Feb 17, 2025

Conversation

imor
Copy link
Contributor

@imor imor commented Feb 17, 2025

Users can no longer get all accounts and organizations from the respectively named views. Only an authenticated user can view their own account and only organization members can get their organization.

Two new functions have been added to get accounts and organization by handle, respectively named get_account(handle) and get_organization(handle).

Copy link

vercel bot commented Feb 17, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
dbdev ✅ Ready (Inspect) Visit Preview 💬 Add feedback Feb 17, 2025 0:56am

Copy link

supabase bot commented Feb 17, 2025

Updates to Preview Branch (restrict-accounts-and-orgs) ↗︎

Deployments Status Updated
Database Mon, 17 Feb 2025 12:56:09 UTC
Services Mon, 17 Feb 2025 12:56:09 UTC
APIs Mon, 17 Feb 2025 12:56:09 UTC

Tasks are run on every commit but only new migration files are pushed.
Close and reopen this PR if you want to apply changes from existing seed or migration files.

Tasks Status Updated
Configurations Mon, 17 Feb 2025 12:56:09 UTC
Migrations Mon, 17 Feb 2025 12:56:09 UTC
Seeding Mon, 17 Feb 2025 12:56:09 UTC
Edge Functions Mon, 17 Feb 2025 12:56:09 UTC

View logs for this Workflow Run ↗︎.
Learn more about Supabase for Git ↗︎.

@imor imor marked this pull request as ready for review February 17, 2025 12:45
@imor imor requested a review from alaister February 17, 2025 12:45
Copy link
Member

@alaister alaister left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

  • Tested locally

@imor imor requested a review from staaldraad February 17, 2025 13:00
@imor imor merged commit ac20109 into master Feb 17, 2025
7 checks passed
@imor imor deleted the restrict-accounts-and-orgs branch February 17, 2025 13:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants