mirrors/postgsail
1
0
Fork 0
mirror of https://github.com/xbgmsharp/postgsail.git synced 2025-09-17 03:07:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update RSL to 'user.email' settings

Browse Source 
Remove dependency to jwt for auth tables
This commit is contained in:
xbgmsharp
2022-11-29 22:51:07 +01:00
parent 40e25b1f8c
commit 2e269b9424
2 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
initdb/02_6_signalk_roles.sql
View File

@@ -259,10 +259,10 @@ CREATE POLICY admin_all ON auth.vessels TO current_user
-- Allow user_role to update and select on their own records
CREATE POLICY api_user_role ON auth.vessels TO user_role
USING (mmsi = current_setting('vessel.mmsi', true)
AND owner_email = current_setting('request.jwt.claims', false)::json->>'email'
AND owner_email = current_setting('user.email', true)
)
WITH CHECK (mmsi = current_setting('vessel.mmsi', false)
AND owner_email = current_setting('request.jwt.claims', false)::json->>'email'
AND owner_email = current_setting('user.email', true)
);
--CREATE POLICY grafana_role ON auth.vessels TO grafana
-- USING (owner_email = owner_email)
@@ -276,7 +276,7 @@ CREATE POLICY admin_all ON auth.accounts TO current_user
WITH CHECK (true);
-- Allow user_role to update and select on their own records
CREATE POLICY api_user_role ON auth.accounts TO user_role
USING (email = current_setting('request.jwt.claims', false)::json->>'email'
USING (email = current_setting('user.email', true)
)
WITH CHECK (email = current_setting('request.jwt.claims', false)::json->>'email'
WITH CHECK (email = current_setting('user.email', true)
);