From 6ce95194ee20443c8d716b9d28a2f3e33a2718cb Mon Sep 17 00:00:00 2001
From: Hongbo Wu <hongbo@omnivore.app>
Date: Tue, 16 Apr 2024 11:41:19 +0800
Subject: [PATCH] alter read_labels policy to check user_id

---
 .../migrations/0173.do.alter_labels_table_policy.sql  | 11 +++++++++++
 .../0173.undo.alter_labels_table_policy.sql           | 11 +++++++++++
 2 files changed, 22 insertions(+)
 create mode 100755 packages/db/migrations/0173.do.alter_labels_table_policy.sql
 create mode 100755 packages/db/migrations/0173.undo.alter_labels_table_policy.sql

diff --git a/packages/db/migrations/0173.do.alter_labels_table_policy.sql b/packages/db/migrations/0173.do.alter_labels_table_policy.sql
new file mode 100755
index 000000000..1e7f4afdb
--- /dev/null
+++ b/packages/db/migrations/0173.do.alter_labels_table_policy.sql
@@ -0,0 +1,11 @@
+-- Type: DO
+-- Name: alter_labels_table_policy
+-- Description: Alter labels table select policy to check user_id
+
+BEGIN;
+
+ALTER POLICY read_labels ON omnivore.labels
+    TO omnivore_user
+    USING (user_id = omnivore.get_current_user_id());
+
+COMMIT;
diff --git a/packages/db/migrations/0173.undo.alter_labels_table_policy.sql b/packages/db/migrations/0173.undo.alter_labels_table_policy.sql
new file mode 100755
index 000000000..552a9e2c7
--- /dev/null
+++ b/packages/db/migrations/0173.undo.alter_labels_table_policy.sql
@@ -0,0 +1,11 @@
+-- Type: UNDO
+-- Name: alter_labels_table_policy
+-- Description: Alter labels table select policy to check user_id
+
+BEGIN;
+
+ALTER POLICY read_labels ON omnivore.labels
+    TO omnivore_user
+    USING (true);
+
+COMMIT;