SUPABASE_SQL_TO_RUN.sql

-- COPY AND PASTE THIS INTO SUPABASE SQL EDITOR
-- Go to: https://supabase.com/dashboard → SQL Editor → New Query
-- Then paste everything below and click Run

DROP POLICY IF EXISTS "Users can view their own prayers" ON public.prayers;
DROP POLICY IF EXISTS "Users can insert their own prayers" ON public.prayers;
DROP POLICY IF EXISTS "Users can update their own prayers" ON public.prayers;
DROP POLICY IF EXISTS "Users can delete their own prayers" ON public.prayers;

DROP POLICY IF EXISTS "Users can view their own reflections" ON public.reflections;
DROP POLICY IF EXISTS "Users can insert their own reflections" ON public.reflections;
DROP POLICY IF EXISTS "Users can update their own reflections" ON public.reflections;
DROP POLICY IF EXISTS "Users can delete their own reflections" ON public.reflections;

DROP POLICY IF EXISTS "Users can view their own saved verses" ON public.saved_verses;
DROP POLICY IF EXISTS "Users can insert their own saved verses" ON public.saved_verses;
DROP POLICY IF EXISTS "Users can update their own saved verses" ON public.saved_verses;
DROP POLICY IF EXISTS "Users can delete their own saved verses" ON public.saved_verses;

-- Ensure RLS is enabled
ALTER TABLE public.prayers ENABLE ROW LEVEL SECURITY;
ALTER TABLE public.reflections ENABLE ROW LEVEL SECURITY;
ALTER TABLE public.saved_verses ENABLE ROW LEVEL SECURITY;

-- Create RLS Policies for prayers
CREATE POLICY "Users can view their own prayers"
ON public.prayers FOR SELECT
USING (auth.uid() = user_id);

CREATE POLICY "Users can insert their own prayers"
ON public.prayers FOR INSERT
WITH CHECK (auth.uid() = user_id);

CREATE POLICY "Users can update their own prayers"
ON public.prayers FOR UPDATE
USING (auth.uid() = user_id)
WITH CHECK (auth.uid() = user_id);

CREATE POLICY "Users can delete their own prayers"
ON public.prayers FOR DELETE
USING (auth.uid() = user_id);

-- Create RLS Policies for reflections
CREATE POLICY "Users can view their own reflections"
ON public.reflections FOR SELECT
USING (auth.uid() = user_id);

CREATE POLICY "Users can insert their own reflections"
ON public.reflections FOR INSERT
WITH CHECK (auth.uid() = user_id);

CREATE POLICY "Users can update their own reflections"
ON public.reflections FOR UPDATE
USING (auth.uid() = user_id)
WITH CHECK (auth.uid() = user_id);

CREATE POLICY "Users can delete their own reflections"
ON public.reflections FOR DELETE
USING (auth.uid() = user_id);

-- Create RLS Policies for saved_verses
CREATE POLICY "Users can view their own saved verses"
ON public.saved_verses FOR SELECT
USING (auth.uid() = user_id);

CREATE POLICY "Users can insert their own saved verses"
ON public.saved_verses FOR INSERT
WITH CHECK (auth.uid() = user_id);

CREATE POLICY "Users can update their own saved verses"
ON public.saved_verses FOR UPDATE
USING (auth.uid() = user_id)
WITH CHECK (auth.uid() = user_id);

CREATE POLICY "Users can delete their own saved verses"
ON public.saved_verses FOR DELETE
USING (auth.uid() = user_id);

-- Ensure user_id columns exist
ALTER TABLE public.prayers
ADD COLUMN IF NOT EXISTS user_id UUID REFERENCES auth.users(id) ON DELETE CASCADE;

ALTER TABLE public.reflections
ADD COLUMN IF NOT EXISTS user_id UUID REFERENCES auth.users(id) ON DELETE CASCADE;

ALTER TABLE public.saved_verses
ADD COLUMN IF NOT EXISTS user_id UUID REFERENCES auth.users(id) ON DELETE CASCADE;

-- Create indexes for performance
CREATE INDEX IF NOT EXISTS idx_prayers_user_id ON public.prayers(user_id);
CREATE INDEX IF NOT EXISTS idx_reflections_user_id ON public.reflections(user_id);
CREATE INDEX IF NOT EXISTS idx_saved_verses_user_id ON public.saved_verses(user_id);