removing backend-only permissions and changing permissions for quest_completion updates

hasura/metadata/tables.yaml

@@ -431,20 +431,6 @@
         table:
           schema: public
           name: quest_skill
-  insert_permissions:
-  - role: player
-    permission:
-      check: {}
-      set:
-        created_by_player_id: x-hasura-User-Id
-      columns:
-      - cooldown
-      - description
-      - external_link
-      - guild_id
-      - repetition
-      - title
-      backend_only: true
   select_permissions:
   - role: player
     permission:
@@ -501,17 +487,6 @@
   - name: QuestCompletionStatus
     using:
       foreign_key_constraint_on: status
-  insert_permissions:
-  - role: player
-    permission:
-      check: {}
-      set:
-        completed_by_player_id: x-hasura-User-Id
-      columns:
-      - quest_id
-      - submission_link
-      - submission_text
-      backend_only: true
   select_permissions:
   - role: player
     permission:
@@ -526,21 +501,25 @@
   - role: public
     permission:
       columns:
-      - quest_id
       - completed_by_player_id
-      - submitted_at
-      - submission_text
-      - submission_link
+      - id
+      - quest_id
       - status
+      - submission_link
+      - submission_text
+      - submitted_at
       filter: {}
   update_permissions:
   - role: player
     permission:
       columns:
-      - status
+      - submission_link
+      - submission_text
       filter:
-        quest:
-          created_by_player_id:
+        _and:
+        - status:
+            _eq: PENDING
+        - completed_by_player_id:
             _eq: X-Hasura-User-Id
       check: null
 - table: