From 0f2e13fbeec7dbc19aafed5408af03e9b0d57e35 Mon Sep 17 00:00:00 2001 From: Ashwin Date: Sun, 7 Dec 2025 06:17:14 +0530 Subject: [PATCH] docs: broaden PostgreSQL RLS setup grants to ALL PRIVILEGES and refactor Svelte AlertDialog trigger styling. --- RLS_SETUP.md | 14 ++++++++------ frontend/src/lib/components/users/TeamCard.svelte | 12 ++++-------- frontend/src/routes/(app)/users/+page.svelte | 14 +++++--------- 3 files changed, 17 insertions(+), 23 deletions(-) diff --git a/RLS_SETUP.md b/RLS_SETUP.md index 27a67b2f..da1d2727 100644 --- a/RLS_SETUP.md +++ b/RLS_SETUP.md @@ -52,20 +52,22 @@ SELECT usename, usesuper FROM pg_user WHERE usename = 'crm_user'; -- Grant connection rights GRANT CONNECT ON DATABASE bottlecrm TO crm_user; --- Grant schema usage -GRANT USAGE ON SCHEMA public TO crm_user; +-- Grant schema privileges (required for migrations to create/alter tables) +GRANT ALL ON SCHEMA public TO crm_user; -- Grant table permissions (SELECT, INSERT, UPDATE, DELETE) -GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO crm_user; +GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO crm_user; -- Grant sequence permissions (for auto-increment fields) -GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public TO crm_user; +GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA public TO crm_user; -- Grant default privileges for future tables -ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO crm_user; -ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT USAGE, SELECT ON SEQUENCES TO crm_user; +ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO crm_user; +ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO crm_user; ``` +> **Note:** Granting schema/table privileges does NOT weaken RLS. These control DDL operations (CREATE/ALTER/DROP), while RLS controls row-level access. Only `BYPASSRLS` attribute or superuser status bypasses RLS. + --- ## 4. Configure Django Environment diff --git a/frontend/src/lib/components/users/TeamCard.svelte b/frontend/src/lib/components/users/TeamCard.svelte index d51e5127..b76a91de 100644 --- a/frontend/src/lib/components/users/TeamCard.svelte +++ b/frontend/src/lib/components/users/TeamCard.svelte @@ -75,14 +75,10 @@ - - + + diff --git a/frontend/src/routes/(app)/users/+page.svelte b/frontend/src/routes/(app)/users/+page.svelte index 2df5f2f7..a7c6ebb4 100644 --- a/frontend/src/routes/(app)/users/+page.svelte +++ b/frontend/src/routes/(app)/users/+page.svelte @@ -434,15 +434,11 @@ {:else} - - + +