From e67c6ac4fff3490d0e7f1d884544977b66ab9a88 Mon Sep 17 00:00:00 2001
From: Dmitry Maranik <40249835+dmitrymaranik@users.noreply.github.com>
Date: Tue, 14 Jul 2026 14:12:30 -0700
Subject: [PATCH] perf(rls): wrap auth.uid() in account policies so it
 evaluates once per statement (InitPlan)

---
 supabase/migrations/20240414161947_basejump-accounts.sql | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/supabase/migrations/20240414161947_basejump-accounts.sql b/supabase/migrations/20240414161947_basejump-accounts.sql
index 87e913d..d83c359 100644
--- a/supabase/migrations/20240414161947_basejump-accounts.sql
+++ b/supabase/migrations/20240414161947_basejump-accounts.sql
@@ -304,7 +304,7 @@ create policy "users can view their own account_users" on basejump.account_user
     for select
     to authenticated
     using (
-    user_id = auth.uid()
+    user_id = (select auth.uid())
     );
 
 create policy "users can view their teammates" on basejump.account_user
@@ -337,7 +337,7 @@ create policy "Accounts are viewable by primary owner" on basejump.accounts
     for select
     to authenticated
     using (
-    primary_owner_user_id = auth.uid()
+    primary_owner_user_id = (select auth.uid())
     );
 
 create policy "Team accounts can be created by any user" on basejump.accounts