Next.js Server Component role base access with Supabase 

I think supabase just updated the UI. right now you can do it in the sql editor and create the trigger from there by using this command. create trigger after insert on auth.users for each row execute function ();

There is one security problem with that aproach that you all guys have to be aware of. If you make a "user" or "profile" table where you store all the user info like, name, avatar, settings, etc and you store the role on that same table you have a security issue there. Because you will probably make a Row Level Security where you are going to allow users edit their own row in "user" table, therefore the user will have access to change his own role to "admin". To solve this you have to add the "role" column on a different table and that table should have a Row Level Security that only allows to read and not to write/update.

Amazing video :) Please continue !

Perfect tutorial, I was confused with managing the user accesses, this one cleared all the doubts, thanks ❤

Brilliant video - just what I needed. Thanks (and subscribed).

so clearly. thank you

nice video and nice line-height

we want more... ❤ could you do supabase and stripe?

Great videos, thanks! Could you do one where anyone visiting the site can view the all the posts, but only an admin can update the posts that belong to them?

I think a regional manager with several managers with several teams. Managers should only see their teams… etc. I’ve been thinking about how to make this works for several years now as I have learned to code.

hi a beginner here, why i cant choose the users from the trigger option right now ?

Hello, great tutorial 👍 ! Everything was going fine until when I needed to select the auth table (timestamp 06:23) in the trigger ui. Only my public tables were available and not anything else! Is there a reason why I can't make triggers from any of the locked shemas? Can you help. Thanks, Mark

Supabase has a roles column in auth.users I tried to use that but maybe that is not how it is supposed to be used maybe that's only there to be managed for supabase? I created a custom role give it to a user but then when I made the rule it was simply not working, of course I gave the user in auth.users that custom role but then I had to change it back to authenticated then update the rule and it worked normally.

i am getting this error while sign up AuthApiError: duplicate key value violates unique constraint "user_pkey" as i am created trigger from sql editor

Are there any security flaws using this method?

nice video, i have a qustion, how can i change the role using params? i need create multiples roles

But how to set role while we signup not with supabase?

sir can you create a react version of this please I dont understang nextJS

hey bro can you updated this please I need this and the role please dont just put the role in it manuall make it dynamic, also please take it slow man you kind super fast

Your head is covering code ... we really didn't need to see your face ... we just needed to see code which we couldn't for your head which makes this video useless ...