From 9bdc777010db23bd6ae20fcaf0cac143037c053b Mon Sep 17 00:00:00 2001 From: xbgmsharp Date: Mon, 14 Aug 2023 17:55:36 +0200 Subject: [PATCH] Update scheduler role row level security (RLS) --- initdb/02_6_signalk_roles.sql | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/initdb/02_6_signalk_roles.sql b/initdb/02_6_signalk_roles.sql index 59e1700..1d27e2f 100644 --- a/initdb/02_6_signalk_roles.sql +++ b/initdb/02_6_signalk_roles.sql @@ -355,7 +355,7 @@ CREATE POLICY api_vessel_role ON public.process_queue TO vessel_role CREATE POLICY api_user_role ON public.process_queue TO user_role USING (ref_id = current_setting('user.id', true) OR ref_id = current_setting('vessel.id', true)) WITH CHECK (ref_id = current_setting('user.id', true) OR ref_id = current_setting('vessel.id', true)); --- Allow scheduler see all rows and add any rows +-- Allow scheduler see all rows and updates any rows CREATE POLICY api_scheduler_role ON public.process_queue TO scheduler USING (true) - WITH CHECK (true); + WITH CHECK (false);