truck bed

Description

-- Prevent a non-admin from escalating their own role via the self-update policy create function public.prevent_self_role_change() returns trigger language plpgsql security definer set search_path = public as $$ begin if new.role is distinct from old.role and not public.is_admin() then new.role := old.role; end if; return new; end; $$;