From 9ccadb6085498119bdfcc172d52c7fce1eb3336e Mon Sep 17 00:00:00 2001 From: Ruben Fiszel Date: Fri, 14 Feb 2025 11:12:26 +0100 Subject: [PATCH] fix: users should be able to see their own jobs --- .../migrations/20250205131518_see_own_fix_job.down.sql | 1 + backend/migrations/20250205131518_see_own_fix_job.up.sql | 8 ++++++++ 2 files changed, 9 insertions(+) create mode 100644 backend/migrations/20250205131518_see_own_fix_job.down.sql create mode 100644 backend/migrations/20250205131518_see_own_fix_job.up.sql diff --git a/backend/migrations/20250205131518_see_own_fix_job.down.sql b/backend/migrations/20250205131518_see_own_fix_job.down.sql new file mode 100644 index 0000000000..d2f607c5b8 --- /dev/null +++ b/backend/migrations/20250205131518_see_own_fix_job.down.sql @@ -0,0 +1 @@ +-- Add down migration script here diff --git a/backend/migrations/20250205131518_see_own_fix_job.up.sql b/backend/migrations/20250205131518_see_own_fix_job.up.sql new file mode 100644 index 0000000000..554cf5647b --- /dev/null +++ b/backend/migrations/20250205131518_see_own_fix_job.up.sql @@ -0,0 +1,8 @@ +-- Add up migration script here +DROP POLICY IF EXISTS see_own ON v2_job; +CREATE POLICY see_own ON v2_job + AS PERMISSIVE + FOR ALL + TO windmill_user + USING ((SPLIT_PART((permissioned_as)::TEXT, '/'::TEXT, 1) = 'u'::TEXT) AND + (SPLIT_PART((permissioned_as)::TEXT, '/'::TEXT, 2) = CURRENT_SETTING('session.user'::TEXT))); \ No newline at end of file