feat: revoke grant extras

sev-2 · Sep 24, 2024 · 8369882 · 8369882
1 parent 0770271
commit 8369882
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/pkg/supabase/query/role.go b/pkg/supabase/query/role.go
@@ -180,5 +180,12 @@ func BuildUpdateRoleQuery(newRole objects.Role, updateRoleParam objects.UpdateRo
 }
 
 func BuildDeleteRoleQuery(role objects.Role) string {
-	return fmt.Sprintf("DROP ROLE %s;", role.Name)
+	return fmt.Sprintf(`
+		REVOKE %s FROM authenticator;
+		REVOKE anon FROM %s;
+		DROP ROLE %s;`,
+		role.Name,
+		role.Name,
+		role.Name,
+	)
 }