enable_admin_permissions.sql

-- Enable Admin Permissions
-- Run this in your Supabase SQL Editor to allow Admins to Edit and Delete users.

-- 1. Policies for Profiles Table
-- Allow admins to update any user's profile (Users can only update their own)
create policy "Admins can update any profile" on profiles for update using (
  exists (select 1 from roles where user_id = auth.uid() and role = 'admin')
);

-- Allow admins to delete any user's profile
create policy "Admins can delete any profile" on profiles for delete using (
  exists (select 1 from roles where user_id = auth.uid() and role = 'admin')
);

-- 2. Policies for Roles Table
-- Allow admins to assign roles (insert)
create policy "Admins can insert roles" on roles for insert with check (
  exists (select 1 from roles where user_id = auth.uid() and role = 'admin')
);

-- Allow admins to change roles (update)
create policy "Admins can update roles" on roles for update using (
  exists (select 1 from roles where user_id = auth.uid() and role = 'admin')
);

-- Allow admins to remove roles (delete)
create policy "Admins can delete roles" on roles for delete using (
  exists (select 1 from roles where user_id = auth.uid() and role = 'admin')
);