CREATE POLICY "Allow admins to update orgs" ON "public"."orgs"
AS PERMISSIVE FOR UPDATE
TO public
USING (id = any(public.user_orgs()))
WITH CHECK ('admin' = any(public.user_roles(id)));