feat: allow anon to see all profiles

Signed-off-by: Raphael Arce <[email protected]>

supabase/migrations/20241011145739_allow_anon_profile_select.sql

@@ -0,0 +1,6 @@
+create policy "Enable read access for all users"
+on "public"."profiles"
+as PERMISSIVE
+for SELECT
+to public
+using (true);

tests/profiles.test.ts

@@ -15,16 +15,16 @@ describe("profiles table", () => {
 		await deleteUsers([users.userId1, users.userId2]);
 	});
 
-	it("should return no profiles when user is not logged in", async () => {
+	it("should return all profiles when user is not logged in", async () => {
 		const { data, error } = await supabaseAnonClient
 			.from("profiles")
 			.select("*");
 		expect(error).toBeNull();
 		expect(data).toBeDefined();
-		expect(data!.length).toBe(0);
+		expect(data!.length).toBe(2);
 	});
 
-	it("should return user's own profile when user is logged in", async () => {
+	it("should return all profiles when user is logged in", async () => {
 		const { data: data1, error: error1 } =
 			await supabaseAnonClient.auth.signInWithPassword({
 				email: "[email protected]",
@@ -38,6 +38,6 @@ describe("profiles table", () => {
 			.select("*");
 		expect(error).toBeNull();
 		expect(data).toBeDefined();
-		expect(data!.length).toBe(1);
+		expect(data!.length).toBe(2);
 	});
 });