Roles & Permissions

const { user } = useAuth();
const isAdmin = user?.role === 'admin';

// Show admin-only features
{isAdmin && (
  <Button onClick={handleAddUser}>
    <Plus className="mr-2 h-4 w-4" /> Add User
  </Button>
)}

-- Admin users can manage all profiles
CREATE POLICY "Admin users can manage all profiles" 
ON public.profiles
  FOR ALL TO authenticated 
  USING (get_current_user_role() = 'admin')
  WITH CHECK (get_current_user_role() = 'admin');

const { user } = useAuth();
const isAdmin = user?.role === 'admin';

// Add admin-only columns to data table
if (isAdmin) {
  columns.push({
    header: "Actions",
    accessorKey: "actions",
    cell: (row) => (
      <div className="flex space-x-2">
        <Button onClick={() => handleEdit(row)}>Edit</Button>
        <Button onClick={() => handleDelete(row)}>Delete</Button>
      </div>
    ),
  });
}

-- Users can view assigned packages
CREATE POLICY "Users can view assigned packages" 
ON public.packages
  FOR SELECT TO authenticated 
  USING (
    get_current_user_role() = 'admin' OR 
    auth.uid() = created_by_id OR
    auth.uid() = ANY(assigned_packages)
  );

-- Users can only update their own profile
CREATE POLICY "Users can update their own profile" 
ON public.profiles
  FOR UPDATE TO authenticated 
  USING (auth.uid() = id)
  WITH CHECK (auth.uid() = id);

CREATE OR REPLACE FUNCTION get_current_user_role()
RETURNS TEXT AS $$
  SELECT role FROM public.profiles WHERE id = auth.uid();
$$ LANGUAGE SQL SECURITY DEFINER STABLE;

-- Only admins can insert new vehicles
CREATE POLICY "Admin users can manage vehicles" 
ON public.vehicles
  FOR ALL TO authenticated 
  USING (get_current_user_role() = 'admin')
  WITH CHECK (get_current_user_role() = 'admin');

export interface AuthUser {
  id: string;
  username: string;
  role: UserRole;  // 'admin' | 'user'
  email?: string;
  active?: boolean;
}

const { user } = useAuth();
console.log(user.role); // 'admin' or 'user'

export type UserRole = "admin" | "user";

CREATE TABLE profiles (
  id UUID PRIMARY KEY REFERENCES auth.users(id),
  username TEXT,
  role TEXT CHECK (role IN ('admin', 'user')),
  active BOOLEAN DEFAULT true,
  assigned_packages TEXT[],
  created_at TIMESTAMP DEFAULT NOW(),
  updated_at TIMESTAMP DEFAULT NOW()
);