Supabase RLS Changed How I Think About Application Authorization
Building DocumentHub with Supabase RLS made me separate query intent from authorization: the application describes the rows it wants, while the database independently constrains which rows the caller may access.
Read article