supabase-postgres.git / summary / log / commit / refs

commit    10db5b3ed6be5f752ad299399e7ed9564378e80d
Author:   Bobbie Soedirgo <bobbie@soedirgo.dev>
Commit:   Bobbie Soedirgo <31685197+soedirgo@users.noreply.github.com>
Date:     Wed Jun 12 06:38:53 2024 +0000

    feat: revoke supabase_*_admin from postgres
    
    Prevents Auth and Storage schemas & migrations from being modified


 ...50421084701_revoke_supabase_storage_admin_from_postgres.sql | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/migrations/db/migrations/20250421084701_revoke_supabase_storage_admin_from_postgres.sql b/migrations/db/migrations/20250421084701_revoke_supabase_storage_admin_from_postgres.sql
new file mode 100644
index 00000000..4c5c48b7
--- /dev/null
+++ b/migrations/db/migrations/20250421084701_revoke_supabase_storage_admin_from_postgres.sql
@@ -0,0 +1,10 @@
+-- migrate:up
+revoke supabase_storage_admin from postgres;
+revoke create on schema storage from postgres;
+revoke all on storage.migrations from anon, authenticated, service_role, postgres;
+
+revoke supabase_auth_admin from postgres;
+revoke create on schema auth from postgres;
+revoke all on auth.schema_migrations from dashboard_user, postgres;
+
+-- migrate:down


[parent: b1fd9d638a3d]