diff --git a/supabase/migrations/018_client_editor_insert.sql b/supabase/migrations/018_client_editor_insert.sql new file mode 100644 index 0000000..a409fe3 --- /dev/null +++ b/supabase/migrations/018_client_editor_insert.sql @@ -0,0 +1,15 @@ +-- Permite que client_editor inserte procesos en su propia org +-- Los demás roles mantienen sus permisos actuales + +DROP POLICY IF EXISTS "insert_processes" ON public.processes; + +CREATE POLICY "insert_processes" ON public.processes + FOR INSERT WITH CHECK ( + public.is_platform_admin() + OR public.current_platform_role() = 'member' + OR ( + public.current_platform_role() = 'client_editor' + AND org_id = public.current_org() + ) + -- client_viewer y guest siguen sin poder crear procesos + );