From 07ce2b3421a390e3d9e7c7565829bf5805750b27 Mon Sep 17 00:00:00 2001
From: Josh Creek <8179928+jcreek@users.noreply.github.com>
Date: Sun, 18 Jan 2026 13:25:54 +0000
Subject: [PATCH] fix(*): Address PR comment

---
 supabase/migrations/20260118000000_init_schema.sql | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/supabase/migrations/20260118000000_init_schema.sql b/supabase/migrations/20260118000000_init_schema.sql
index da9e7b1..191b00f 100644
--- a/supabase/migrations/20260118000000_init_schema.sql
+++ b/supabase/migrations/20260118000000_init_schema.sql
@@ -266,7 +266,13 @@ CREATE POLICY "Users can manage own dex scopes" ON pokedex_dex_scopes
 ALTER TABLE pokedex_pokemon_mapping ENABLE ROW LEVEL SECURITY;
 CREATE POLICY "Anyone can view pokedex pokemon mapping"
   ON pokedex_pokemon_mapping
-  FOR SELECT USING (true);
+  FOR SELECT USING (
+    EXISTS (
+      SELECT 1 FROM pokedexes
+      WHERE pokedexes.id = pokedex_pokemon_mapping."pokedexId"
+      AND pokedexes."userId" = auth.uid()
+    )
+  );
 CREATE POLICY "Users can insert own pokedex pokemon mappings"
   ON pokedex_pokemon_mapping
   FOR INSERT WITH CHECK (