fix: RLS-политика для водителя + SQL-миграция

- Водитель не мог сохранить данные отгрузки — RLS блокировал UPDATE
- Добавлена политика: driver может UPDATE order_groups где assigned_driver_id = auth.uid()
- Сохранена SQL-миграция в docs/sql/
This commit is contained in:
root 2026-06-15 16:08:00 +00:00
parent 55c91d8d32
commit 158026b49f
1 changed files with 8 additions and 0 deletions

View File

@ -0,0 +1,8 @@
-- Allow drivers to update order_groups where they are assigned
-- This enables saving shipment data and updating delivery status
CREATE POLICY "order groups driver update shipment data"
ON public.order_groups
FOR UPDATE
TO public
USING (current_role_name() = 'driver' AND assigned_driver_id = auth.uid())
WITH CHECK (current_role_name() = 'driver' AND assigned_driver_id = auth.uid());