The side door: Ember sniffs your Supabase views

You locked the front door with RLS. Ember would like a word about the side door. In Postgres, a view runs with its owner's permissions by default, not the caller's. In Supabase, that owner usually bypasses RLS. So a view in your public schema can hand your anon key rows your table policies were built to hide. The two-minute check List the views in... Weiterlesen: The side door: Ember sniffs your Supabase views