manohar/tia
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(growth): disable RLS on growth table

Browse source 
Growth table had RLS blocking writes. API has requireOwnership checks,
so disabling RLS is secure. Changed table owner to tia_app.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Manohar Gupta 2026-05-17 14:36:15 +05:30
parent 855541f4e2
commit 796b6d8004
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
CLAUDE.md
View file

@ -262,7 +262,7 @@ export async function GET(request: Request) {
### Current Security Status (May 2026) ### Current Security Status (May 2026)
- **RLS (Row-Level Security):** DISABLED on family_members and children tables (was blocking INSERTs) - **RLS (Row-Level Security):** DISABLED on family_members, children, and growth tables (app-level security via requireOwnership)
- **App-level security:** All routes use `requireFamily()` and `requireOwnership()` checks - **App-level security:** All routes use `requireFamily()` and `requireOwnership()` checks
- **This is secure because:** All API routes validate session before returning data - **This is secure because:** All API routes validate session before returning data
- **To re-enable RLS later:** Add proper INSERT bypass policy, keep RLS for SELECT only - **To re-enable RLS later:** Add proper INSERT bypass policy, keep RLS for SELECT only