Make the public API use RLS instead of TS right checks

Open riderx opened this issue 11 months ago • 2 comments

Describe the bug/issue Instead of using Supabase Admin for public endpoint, we should always use supabaseApikey to ensure we have the same Right policy between web and API

Feb 16 '25 12:02 riderx

@devin All public endpoint use supabase admin we would like to enforce supabase with apikey to be sure user can never hack they way to unallowed action. Make sure to update the test to test rights as well and errors send should be clear

Mar 11 '25 10:03 riderx

@devin do it

Mar 15 '25 05:03 riderx