Jyotisha/frontend/supabase/migrations/20260718060000_profiles_service_role_least_privilege.sql

begin;

revoke all privileges on table public.profiles from service_role;

revoke select (
  id,
  email,
  credits,
  created_at,
  updated_at,
  name,
  birth_date,
  birth_time,
  country_code,
  province_code,
  city_code,
  district_code,
  onboarding_payload,
  onboarding_version,
  onboarding_generated_at,
  latitude,
  longitude,
  timezone_offset,
  reported_birth_time,
  active_birth_time,
  birth_time_source,
  birth_time_period,
  birth_time_clue,
  uncertainty_before_minutes,
  uncertainty_after_minutes,
  birth_time_status,
  rectification_confidence,
  rectification_case_id
) on table public.profiles from service_role;

revoke insert (
  id,
  email,
  credits,
  created_at,
  updated_at,
  name,
  birth_date,
  birth_time,
  country_code,
  province_code,
  city_code,
  district_code,
  onboarding_payload,
  onboarding_version,
  onboarding_generated_at,
  latitude,
  longitude,
  timezone_offset,
  reported_birth_time,
  active_birth_time,
  birth_time_source,
  birth_time_period,
  birth_time_clue,
  uncertainty_before_minutes,
  uncertainty_after_minutes,
  birth_time_status,
  rectification_confidence,
  rectification_case_id
) on table public.profiles from service_role;

revoke update (
  id,
  email,
  credits,
  created_at,
  updated_at,
  name,
  birth_date,
  birth_time,
  country_code,
  province_code,
  city_code,
  district_code,
  onboarding_payload,
  onboarding_version,
  onboarding_generated_at,
  latitude,
  longitude,
  timezone_offset,
  reported_birth_time,
  active_birth_time,
  birth_time_source,
  birth_time_period,
  birth_time_clue,
  uncertainty_before_minutes,
  uncertainty_after_minutes,
  birth_time_status,
  rectification_confidence,
  rectification_case_id
) on table public.profiles from service_role;

grant select (
  id,
  name,
  birth_date,
  birth_time,
  country_code,
  province_code,
  city_code,
  latitude,
  longitude,
  timezone_offset,
  active_birth_time,
  birth_time_status,
  onboarding_payload,
  onboarding_version,
  onboarding_generated_at,
  rectification_case_id
) on table public.profiles to service_role;

grant insert (
  id,
  email,
  name,
  birth_date,
  birth_time,
  country_code,
  province_code,
  city_code,
  district_code,
  latitude,
  longitude,
  timezone_offset,
  updated_at
) on table public.profiles to service_role;

grant update (
  name,
  birth_date,
  birth_time,
  country_code,
  province_code,
  city_code,
  district_code,
  latitude,
  longitude,
  timezone_offset,
  updated_at,
  onboarding_payload,
  onboarding_version,
  onboarding_generated_at,
  reported_birth_time,
  active_birth_time,
  birth_time_source,
  birth_time_period,
  birth_time_clue,
  uncertainty_before_minutes,
  uncertainty_after_minutes,
  birth_time_status,
  rectification_confidence,
  rectification_case_id
) on table public.profiles to service_role;

commit;