-- Allow authenticated users to read points from all predictions (for leaderboard) -- Run this once in Supabase SQL Editor CREATE POLICY "allow_read_points" ON predictions FOR SELECT TO authenticated USING (true); -- Also allow admin to update any prediction row CREATE POLICY "allow_admin_update_predictions" ON predictions FOR UPDATE TO authenticated USING (EXISTS (SELECT 1 FROM profiles WHERE id = auth.uid() AND is_admin = true));