kan/supabase/seed.sql

CREATE OR REPLACE FUNCTION reorder_lists(board_id BIGINT, list_id BIGINT, current_index INT, new_index INT)
RETURNS VOID
LANGUAGE SQL
AS $$  
  UPDATE list
    SET index =
      CASE
        WHEN index = current_index AND id = list_id THEN new_index
        WHEN current_index < new_index AND index > current_index AND index <= new_index THEN index - 1
        WHEN current_index > new_index AND index >= new_index AND index < current_index THEN index + 1
        ELSE index
      END
    WHERE "boardId" = board_id;
$$;

CREATE OR REPLACE FUNCTION reorder_cards(card_id BIGINT, current_list_id BIGINT, new_list_id BIGINT, current_index INT, new_index INT)
RETURNS VOID
LANGUAGE PLPGSQL
AS $$
  DECLARE
      card_index INT;
  BEGIN
      SELECT index INTO card_index FROM card WHERE "listId" = current_list_id AND id = card_id AND "deletedAt" IS NULL;
      
      IF current_list_id = new_list_id THEN
          UPDATE card
          SET index =
              CASE
                  WHEN index = current_index THEN new_index
                  WHEN current_index < new_index AND index > current_index AND index <= new_index THEN index - 1
                  WHEN current_index > new_index AND index >= new_index AND index < current_index THEN index + 1
                  ELSE index
              END
          WHERE "listId" = current_list_id AND "deletedAt" IS NULL;
      ELSE
          UPDATE card
          SET index = index + 1
          WHERE "listId" = new_list_id AND index >= new_index AND "deletedAt" IS NULL;

          UPDATE card
          SET index = index - 1
          WHERE "listId" = current_list_id AND index >= current_index AND "deletedAt" IS NULL;

          UPDATE card
          SET "listId" = new_list_id, index = new_index
          WHERE id = card_id AND "deletedAt" IS NULL;
      END IF;
  END;
$$

CREATE OR REPLACE FUNCTION shift_list_index(board_id BIGINT, list_index INT)
RETURNS VOID
LANGUAGE SQL
AS $$
  UPDATE list
    SET index = index - 1
    WHERE "boardId" = board_id AND index > list_index AND "deletedAt" IS NULL;
$$;

CREATE OR REPLACE FUNCTION shift_card_index(list_id BIGINT, card_index INT)
RETURNS VOID
LANGUAGE SQL
AS $$
  UPDATE card
    SET index = index - 1
    WHERE "listId" = list_id AND index > card_index AND "deletedAt" IS NULL;
$$;

CREATE OR REPLACE FUNCTION push_card_index(list_id BIGINT, card_index INT)
RETURNS VOID
LANGUAGE SQL
AS $$
  UPDATE card
    SET index = index + 1
    WHERE "listId" = list_id AND index >= card_index AND "deletedAt" IS NULL;
$$;

CREATE OR REPLACE FUNCTION is_workspace_admin(user_id UUID, workspace_id BIGINT)
RETURNS BOOLEAN
LANGUAGE SQL
AS $$
  SELECT EXISTS (
    SELECT 1
    FROM workspace_members
    WHERE "workspaceId" = workspace_id
      AND "userId" = user_id
      AND "role" = 'admin'
  );
$$;

alter table "_card_labels" enable row level security;
alter table "_card_workspace_members" enable row level security;
alter table "board" enable row level security;
alter table "card" enable row level security;
alter table "import" enable row level security;
alter table "label" enable row level security;
alter table "user" enable row level security;
alter table "list" enable row level security;
alter table "workspace" enable row level security;
alter table "workspace_members" enable row level security;

CREATE POLICY "Allow access to boards in user's workspace"
ON public.board
AS PERMISSIVE
FOR ALL
TO authenticated
USING (
  "workspaceId" IN (
    SELECT "workspaceId"
    FROM workspace_members
    WHERE "userId" = auth.uid()
  )
);

CREATE POLICY "Allow access to lists in user's workspace"
ON public.list
AS PERMISSIVE
FOR ALL
TO authenticated
USING (
  "boardId" IN (
    SELECT b.id
    FROM board b
    JOIN workspace_members wm ON b."workspaceId" = wm."workspaceId"
    WHERE wm."userId" = auth.uid()
  )
);

CREATE POLICY "Allow access to cards in user's workspace"
ON public.card
AS PERMISSIVE
FOR ALL
TO authenticated
USING (
  "listId" IN (
    SELECT l.id
    FROM list l
    JOIN board b ON l."boardId" = b."id"
    JOIN workspace_members wm ON b."workspaceId" = wm."workspaceId"
    WHERE wm."userId" = auth.uid()
  )
);

CREATE POLICY "Allow access to labels in user's workspace"
ON public.label
AS PERMISSIVE
FOR ALL
TO authenticated
USING (
  "boardId" IN (
    SELECT b.id
    FROM board b
    JOIN workspace_members wm ON b."workspaceId" = wm."workspaceId"
    WHERE wm."userId" = auth.uid()
  )
);

CREATE POLICY "Allow access to card labels in user's workspace"
ON public._card_labels
AS PERMISSIVE
FOR ALL
TO authenticated
USING (
  "cardId" IN (
    SELECT c.id
    FROM card c
    JOIN list l ON c."listId" = l.id
    JOIN board b ON l."boardId" = b.id
    JOIN workspace_members wm ON b."workspaceId" = wm."workspaceId"
    WHERE wm."userId" = auth.uid()
  )
  AND
  "labelId" IN (
    SELECT l.id
    FROM label l
    JOIN board b ON l."boardId" = b.id
    JOIN workspace_members wm ON b."workspaceId" = wm."workspaceId"
    WHERE wm."userId" = auth.uid()
  )
);

CREATE POLICY "Allow access to card workspace members in user's workspace"
ON public._card_workspace_members
AS PERMISSIVE
FOR ALL
TO authenticated
USING (
  "cardId" IN (
    SELECT c.id
    FROM card c
    JOIN list l ON c."listId" = l.id
    JOIN board b ON l."boardId" = b.id
    JOIN workspace_members wm ON b."workspaceId" = wm."workspaceId"
    WHERE wm."userId" = auth.uid()
  )
  AND
  "workspaceMemberId" IN (
    SELECT wm.id
    FROM workspace_members wm
    JOIN workspace w ON wm."workspaceId" = w.id
    JOIN board b ON w.id = b."workspaceId"
    WHERE wm."userId" = auth.uid()
  )
);

CREATE POLICY "Allow viewing members in user's workspace"
ON public.user
AS PERMISSIVE
FOR SELECT
TO authenticated
USING (
  id IN (
    SELECT wm."userId"
    FROM workspace_members wm
    WHERE wm."workspaceId" IN (
      SELECT "workspaceId"
      FROM workspace_members
      WHERE "userId" = auth.uid()
    )
  )
);

CREATE POLICY "Allow viewing user's workspaces"
ON public.workspace
AS PERMISSIVE
FOR SELECT
TO authenticated
USING (
  id IN (
    SELECT "workspaceId"
    FROM workspace_members
    WHERE "userId" = auth.uid()
  )
  OR
  "createdBy" = auth.uid()
);

CREATE POLICY "Allow updating user's workspaces"
ON public.workspace
AS PERMISSIVE
FOR UPDATE
TO authenticated
USING (
  id IN (
    SELECT "workspaceId"
    FROM workspace_members
    WHERE "userId" = auth.uid()
  )
);

CREATE POLICY "Allow deleting user's workspaces"
ON public.workspace
AS PERMISSIVE
FOR DELETE
TO authenticated
USING (
  id IN (
    SELECT "workspaceId"
    FROM workspace_members
    WHERE "userId" = auth.uid()
  )
);

CREATE POLICY "Allow authenticated users to create workspaces"
ON public.workspace
AS PERMISSIVE
FOR INSERT
TO authenticated
USING (true);

CREATE POLICY "Allow members to view workspace membership"
ON public.workspace_members
AS PERMISSIVE
FOR SELECT
TO authenticated
USING (
  "userId" = auth.uid() OR
  is_workspace_admin(auth.uid(), "workspaceId")
);

CREATE POLICY "Allow admins to add workspace members"
ON public.workspace_members
AS PERMISSIVE
FOR INSERT
TO authenticated
WITH CHECK (
  is_workspace_admin(auth.uid(), "workspaceId")
);

CREATE POLICY "Allow admins to update workspace members"
ON public.workspace_members
AS PERMISSIVE
FOR UPDATE
TO authenticated
USING (
  is_workspace_admin(auth.uid(), "workspaceId")
);

CREATE POLICY "Allow admins to remove workspace members"
ON public.workspace_members
AS PERMISSIVE
FOR DELETE
TO authenticated
USING (
  is_workspace_admin(auth.uid(), "workspaceId")
);
CREATE POLICY "Allow access to user's own imports"
ON public.import
AS PERMISSIVE
FOR ALL
TO authenticated
USING (
  "createdBy" = auth.uid()
);