Right now RLS is disabled on some of the tables. This is because we are calling postgres triggers which are not properly passing the authentication down, or the place it is being passed from is not right.
We need to look at how to fix the RLS rules so that we have strict RLS on everything.
Right now RLS is disabled on some of the tables. This is because we are calling postgres triggers which are not properly passing the authentication down, or the place it is being passed from is not right.
We need to look at how to fix the RLS rules so that we have strict RLS on everything.
This especially affects account creation.