From Dev.to
Who made you admin? Ember checks your Supabase role column
Ember promoted herself to Head of Security. Your users shouldn't be able to. Here's the catch: Supabase RLS policies decide which rows a user can update, not which columns. If role or is_admin lives o...