feat(database): enable row level security on all tables

alembic/versions/e7b2c9a1d4f8_enable_rls_on_all_tables.py

@@ -0,0 +1,37 @@
+"""enable rls on all tables
+
+Revision ID: e7b2c9a1d4f8
+Revises: dc6a7b8c9d0e
+Create Date: 2026-05-20 00:15:00.000000
+
+"""
+from typing import Sequence, Union
+from alembic import op
+
+# revision identifiers, used by Alembic.
+revision: str = 'e7b2c9a1d4f8'
+down_revision: Union[str, None] = 'dc6a7b8c9d0e'
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+tables = [
+    'users',
+    'projects',
+    'research_papers',
+    'paper_chunks',
+    'analysis_runs',
+    'contradictions',
+    'research_gaps',
+    'experimental_protocols',
+    'reasoning_traces',
+    'exports',
+    'activity_logs'
+]
+
+def upgrade() -> None:
+    for table in tables:
+        op.execute(f"ALTER TABLE {table} ENABLE ROW LEVEL SECURITY;")
+
+def downgrade() -> None:
+    for table in tables:
+        op.execute(f"ALTER TABLE {table} DISABLE ROW LEVEL SECURITY;")

init_db.sql

@@ -165,3 +165,20 @@ CREATE INDEX idx_analysis_project ON analysis_runs(project_id);
 CREATE INDEX idx_contradictions_analysis ON contradictions(analysis_id);
 CREATE INDEX idx_protocols_analysis ON experimental_protocols(analysis_id);
 CREATE INDEX idx_reasoning_analysis ON reasoning_traces(analysis_id);
+
+-- ==========================================
+-- ENABLE ROW LEVEL SECURITY (RLS) FOR SUPABASE
+-- ==========================================
+
+ALTER TABLE users ENABLE ROW LEVEL SECURITY;
+ALTER TABLE projects ENABLE ROW LEVEL SECURITY;
+ALTER TABLE research_papers ENABLE ROW LEVEL SECURITY;
+ALTER TABLE paper_chunks ENABLE ROW LEVEL SECURITY;
+ALTER TABLE analysis_runs ENABLE ROW LEVEL SECURITY;
+ALTER TABLE contradictions ENABLE ROW LEVEL SECURITY;
+ALTER TABLE research_gaps ENABLE ROW LEVEL SECURITY;
+ALTER TABLE experimental_protocols ENABLE ROW LEVEL SECURITY;
+ALTER TABLE reasoning_traces ENABLE ROW LEVEL SECURITY;
+ALTER TABLE exports ENABLE ROW LEVEL SECURITY;
+ALTER TABLE activity_logs ENABLE ROW LEVEL SECURITY;
+