-- Tabela de usuários aprovados CREATE TABLE IF NOT EXISTS public.approved_users ( id UUID PRIMARY KEY DEFAULT gen_random_uuid(), user_id UUID REFERENCES auth.users(id) ON DELETE CASCADE, email TEXT UNIQUE NOT NULL, name TEXT, is_admin BOOLEAN DEFAULT FALSE, approved BOOLEAN DEFAULT FALSE, created_at TIMESTAMPTZ DEFAULT NOW() ); -- Tabela de resumos CREATE TABLE IF NOT EXISTS public.resumos ( id UUID PRIMARY KEY DEFAULT gen_random_uuid(), title TEXT NOT NULL, materia TEXT NOT NULL, semestre INTEGER NOT NULL, description TEXT, content TEXT NOT NULL, created_at TIMESTAMPTZ DEFAULT NOW() ); -- Tabela de acessos por usuário+resumo CREATE TABLE IF NOT EXISTS public.user_access ( id UUID PRIMARY KEY DEFAULT gen_random_uuid(), user_id UUID REFERENCES auth.users(id) ON DELETE CASCADE, resumo_id UUID REFERENCES public.resumos(id) ON DELETE CASCADE, granted_at TIMESTAMPTZ DEFAULT NOW(), UNIQUE(user_id, resumo_id) ); -- Habilitar RLS ALTER TABLE public.approved_users ENABLE ROW LEVEL SECURITY; ALTER TABLE public.resumos ENABLE ROW LEVEL SECURITY; ALTER TABLE public.user_access ENABLE ROW LEVEL SECURITY; -- Policies CREATE POLICY "Users see own profile" ON public.approved_users FOR SELECT USING (auth.uid() = user_id); CREATE POLICY "Admins see all users" ON public.approved_users FOR ALL USING (EXISTS (SELECT 1 FROM public.approved_users WHERE user_id = auth.uid() AND is_admin = TRUE)); CREATE POLICY "Resumos visíveis" ON public.resumos FOR SELECT USING (TRUE); CREATE POLICY "Acesso próprio" ON public.user_access FOR SELECT USING (auth.uid() = user_id); CREATE POLICY "Admin gerencia acesso" ON public.user_access FOR ALL USING (EXISTS (SELECT 1 FROM public.approved_users WHERE user_id = auth.uid() AND is_admin = TRUE));