Supabase SECURITY DEFINER: Lock Down Your Functions
Supabase security definer functions bypass RLS and anyone may call them. Find yours with one query, then fix search_path, caller checks and EXECUTE.
Notes tagged Postgres.
Supabase security definer functions bypass RLS and anyone may call them. Find yours with one query, then fix search_path, caller checks and EXECUTE.