CREATE POLICY "Members can add products to own company"
ON public.products
FOR INSERT
TO authenticated
WITH CHECK (company_id = public.get_user_company(auth.uid()));