fix: coderabbit

WcaleNieWolny · WcaleNieWolny · commit 2acf876ec64f · 2025-12-28T15:27:42.000+01:00
diff --git a/supabase/migrations/20251228160000_get_org_members_apikey_support.sql b/supabase/migrations/20251228160000_get_org_members_apikey_support.sql
@@ -27,3 +27,8 @@ BEGIN
 END;
 $$;
 
+-- Revoke public access to inner function to prevent bypassing authorization
+-- The inner function should only be called by the wrapper or service_role
+REVOKE ALL ON FUNCTION "public"."get_org_members" ("user_id" uuid, "guild_id" uuid) FROM "anon";
+REVOKE ALL ON FUNCTION "public"."get_org_members" ("user_id" uuid, "guild_id" uuid) FROM "authenticated";
+
