I created a policy for my "profiles" table so that...
# helps
Señor Bruno
10/21/2021, 7:12 PMI created a policy for my "profiles" table so that users only can create a new row if they are logged in.
But when I actually try to insert data after sign up (email confirmation disabled) I still get RLS violation error. Any hints?
Señor Bruno
10/21/2021, 7:14 PMThis is how I insert:
Copy code
const resProfile = await supabase.from("profiles").insert({
"first_name": dto.firstName,
"last_name": dto.lastName
})g
garyaustin
10/21/2021, 7:23 PMYou also have to have a Select USING RLS as Supabase does a select on insert by default, or tell it not to do the select part with returning set to minimal
s
Señor Bruno
10/21/2021, 7:47 PM@User
These are the policies I have for the table:
Señor Bruno
10/21/2021, 7:48 PMStill getting an error though.
g
garyaustin
10/21/2021, 8:12 PMYou need to insert a uid if you are checking for uid on select.
s
Señor Bruno
10/21/2021, 8:34 PMNot sure I understand by inserting an uid. Don't all users have an uid?
g
garyaustin
10/21/2021, 8:51 PMyou are checking the column user_id against the logged in users uid in the select, but you don't set it in your insert. Are you meaning to do an update?
s
Señor Bruno
10/21/2021, 9:05 PMargh okay. So like this:
Copy code
(
(role() = 'authenticated':: text)
AND (uid() = user_id)
)g
garyaustin
10/21/2021, 9:07 PMNo. When you actually do the insert you need to include the user_id column and uid in your api call, other wise it is not set in the database row and the select will fail.
garyaustin
10/21/2021, 9:08 PMIn your insert RLS if you check uid then you don't need to check authenticated as only authenticated users have a uid.
s
Señor Bruno
10/21/2021, 9:17 PMThanks. I get it now 😄 I was just trying to follow the guides but ended up lost. It works now 😛
z
zeeshanok
10/22/2021, 2:19 AMoh I did not know this, thanks!