2
Allow modifying SELECT RLS on public buckets
Source: supabase/supabase#35213 · opened by @Silfalion
Hello,
I've stumbled upon this use case during a project, the idea is to allow access to certain forum topics and restrict others. The media on the forum need to follow that visibility while also allowing indexing by google for public topics.
The forum can switch in and out of privacy mode if desired by modes.
The media would be stored in a bucket called forums, with each forum having a subfolder. Now, the issue is that you can't easily turn a forum, and by extension its folder, from private to public and vice versa thus blocking access to its media.
So I'd like to suggest allowing the application of select rules on public buckets. The public urls would still exist but they wouldn't resolve for anon until the RLS on Select would allow it, just like it's done for insert, update and delete now.
I've stumbled upon this use case during a project, the idea is to allow access to certain forum topics and restrict others. The media on the forum need to follow that visibility while also allowing indexing by google for public topics.
The forum can switch in and out of privacy mode if desired by modes.
The media would be stored in a bucket called forums, with each forum having a subfolder. Now, the issue is that you can't easily turn a forum, and by extension its folder, from private to public and vice versa thus blocking access to its media.
So I'd like to suggest allowing the application of select rules on public buckets. The public urls would still exist but they wouldn't resolve for anon until the RLS on Select would allow it, just like it's done for insert, update and delete now.
No pledges yet. Be the first to back this.
Comments
Similar requests
Better protection against failing to protect tables with RLS
1 vote · 0 comments
Add Feature to Test + Debug Row Level Security Policies
47 votes · 0 comments
Default RLS Policies.
3 votes · 0 comments
Feature Request: Add supabase_storage_bucket resource
2 votes · 0 comments
Move RLS verification into the policy editor, not beside it
1 vote · 0 comments
No comments yet.