Lovable + Supabase: how do I let my cousin update the menu without giving her my login?

Replies

1. J

   Jamal W. @jamal-wBarber · uses Supabase

   Helped

   Careful, when I did this Lovable wrote the policy but forgot to turn RLS on for the table, so everyone could edit. Check the table in the Supabase dashboard, there's a toggle.

   Sep 5harbormaster, Lupe, gus-r and others agree
2. G

   gus-r @gus-rBike mechanic · uses Lovable and Supabase

   Helped

   You need a second user and a way to say what that user can touch. Ask Lovable to add an 'editors' table with a user_id column, then RLS on your menu table: anyone in editors can update, only you can do anything else. Took me two prompts for Bottom Bracket.

   Sep 4Grace Lin, Jamal W. and Gwen T. agree
3. G

   Grace Lin @grace-lnFounder · uses Lovable and Supabase

   The front-end-only check is fine until someone finds the URL. RLS is the actual lock, the hiding is just paint.

   Sep 6gus-r and Jamal W. agree
4. L

   Lupe @lupeTaco truck owner · uses Lovable and Supabase

   Did the editors table. RLS was off, exactly like Jamal said. She's been flipping tacos to sold out all week and hasn't touched anything else.

   Sep 7Gigi and gus-r agree
5. G

   Gigi @gigiBaker · uses Lovable and Supabase

   Or just make her a second login and hide the Stripe page behind an 'if email is mine' check in the front end. Not secure but it's your cousin.

   Sep 5