Adding customer or service provider roles will make it easier for us to implement RBAC using Supabase RLS. At the moment we don't distinguish between Customer users and Service Provider users, so a Provider could create a task.
There's a few ways we can approach this:
add new postgres roles for Customers and Service Providers
add custom claims to the user's JWT
perform joins in our postgres policies
3 is probably a bad idea since these are probably high frequency queries.
Adding customer or service provider roles will make it easier for us to implement RBAC using Supabase RLS. At the moment we don't distinguish between Customer users and Service Provider users, so a Provider could create a task.
There's a few ways we can approach this:
Customers
andService Providers
3 is probably a bad idea since these are probably high frequency queries.
Let's look into 1 and 2.