
REVOKE SELECT (portal_password_hash) ON public.customers FROM authenticated;
REVOKE SELECT (portal_password_hash) ON public.customers FROM anon;
REVOKE SELECT (portal_password_hash) ON public.customers FROM PUBLIC;

DROP POLICY IF EXISTS "Staff can view staff" ON public.staff;
DROP POLICY IF EXISTS "Admins can view staff" ON public.staff;
CREATE POLICY "Admins can view staff"
  ON public.staff
  FOR SELECT
  TO authenticated
  USING (public.has_role(auth.uid(), 'admin'::app_role));
