xmliszt / taboo-ai

Learn English vocabulary while having fun playing a game with intelligent chat AI. Train to use clear English expression and descriptive phrases to trick the AI into saying the target guess word. Taboo AI is both fun and educational, allowing you to gain knowledge, practice english expression, memorise more vocabs, and simply have fun!

Home Page:https://taboo-ai.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Supabase: RLS policies revisit

xmliszt opened this issue · comments

Currently, our RLS policies are not ideally secure. For example, all users should not be allowed to read user's data.

This can be improved with service_role client which can be created at NextJS server side.

That means, this requires us to refactor the code base first, change from client component to server component and create server actions in Next14 (need upgrade Next13 -> Next14), otherwise, put the logics in NextJS API routes.