Next.js Server Component role base access with Supabase

[@DailyWebCoding]

I think supabase just updated the UI. right now you can do it in the sql editor and create the trigger from there by using this command. create trigger after insert on auth.users for each row execute function ();

[@markbroomfield1818]

Apologises for being thick but could you tell me where I need to add this code? Thank you again for your help, Mark

[@DailyWebCoding]

@@markbroomfield1818 In supabase dashboard sidebar. You can find SQL Editor. That's where you can run the code above

[@markbroomfield1818]

@@DailyWebCoding Apologies, I understand it needs to be added to the SQL Editor. However, does it need to be attached to anything else or just a seperate code and run? Thanks Mark

[@DailyWebCoding]

@@markbroomfield1818 kzbin.info/www/bejne/o5TVoqFtbNGIo68si=GiVaHvcrioXb9bZY you can check this video. Hope is can help you

[@markbroomfield1818]

@@DailyWebCoding Thank you so much for the quick work around on this. Works a treat, great channel and please keep up the amazing work. Thanks Mark

[@FalconMasters]

There is one security problem with that aproach that you all guys have to be aware of. If you make a "user" or "profile" table where you store all the user info like, name, avatar, settings, etc and you store the role on that same table you have a security issue there. Because you will probably make a Row Level Security where you are going to allow users edit their own row in "user" table, therefore the user will have access to change his own role to "admin". To solve this you have to add the "role" column on a different table and that table should have a Row Level Security that only allows to read and not to write/update.

[@guillermomarindavila5779]

gracias falcon, aprendi mucho de ti en un inicio y vaya sorpresa con el comentario, tienes razon!

[@FalconMasters]

@@guillermomarindavila5779 Muchas gracias a ti por ver mis videos, me alegra que te sirvieran!

[@Sirin-i8j]

thnx

[@petrecosminbadescu6161]

I think you can also freeze the column, creating a policy for it

[@codewithguillaume]

Amazing video :) Please continue !

[@DailyWebCoding]

Thank you ❤️

[@kryptons-galaxy]

Perfect tutorial, I was confused with managing the user accesses, this one cleared all the doubts, thanks ❤

[@DailyWebCoding]

Glad it helped!

[@dimitarius4137]

Thank you, this was actually all I was looking for, perfect tutorial, thank you so much!!

[@engelbertteh552]

Just what I needed, thanks!

[@rizqyhbb]

THANKS! this is really helpful

[@matteoperonidev]

Thanks man, you saved my life ❤

[@Aziz-kw6ct]

Your video saved me. thank you very much.

[@giroda]

nice video and nice line-height

[@cheninh1423]

so clearly. thank you

[@markbroomfield1818]

Hello, great tutorial 👍 ! Everything was going fine until when I needed to select the auth table (timestamp 06:23) in the trigger ui. Only my public tables were available and not anything else! Is there a reason why I can't make triggers from any of the locked shemas? Can you help. Thanks, Mark

[@raynosebastian6275]

currently facing the same thing right now, did you find the solution?

[@DailyWebCoding]

I think supabase just updated the UI. right now you can do it in the sql editor and create the trigger from there by using this command. create trigger after insert on auth.users for each row execute function ();

[@codingcode69]

What font and vs code settings you have it looks super clean is there a link to your settings 😅

[@angelluis5252]

nice video, i have a qustion, how can i change the role using params? i need create multiples roles

[@DailyWebCoding]

Currently I am working on a new video about this as well. Stay tuned for that

[@raynosebastian6275]

hi a beginner here, why i cant choose the users from the trigger option right now ?

[@DailyWebCoding]

I think supabase just updated the UI. right now you can do it in the sql editor and create the trigger from there by using this command. create trigger after insert on auth.users for each row execute function ();

[@brianwalsh7040]

Great videos, thanks! Could you do one where anyone visiting the site can view the all the posts, but only an admin can update the posts that belong to them?

[@DailyWebCoding]

Thank you for your suggestion. I will try to do that.

[@appstuff6565]

yes pleaSE ! @@DailyWebCoding

[@streamocu2929]

we want more... ❤ could you do supabase and stripe?

[@DailyWebCoding]

I will look into that. Thank you for your suggestion.

[@automioai]

Yes! stripe-supa -next 13.4-jotai

[@user-dm5qi4nb6l]

Supabase has a roles column in auth.users I tried to use that but maybe that is not how it is supposed to be used maybe that's only there to be managed for supabase? I created a custom role give it to a user but then when I made the rule it was simply not working, of course I gave the user in auth.users that custom role but then I had to change it back to authenticated then update the rule and it worked normally.

[@DailyWebCoding]

You can check my latest video about role management in supabase Build Role Access Dashboard with Next.js 14,Supabase, Shadcn,Tailwind kzbin.info/www/bejne/emilq6OsfbJpgKs

[@DeejayAlid]

Are there any security flaws using this method?

[@FalconMasters]

Yes, that if you make a row level security that allows the user to update his profile or user info and is on the same table as the rol then he has access to update his role and set it to "admin" giving him self permissions. One way to fix this is to have 2 diferent tables for the user, one for his data and other one for his role or permissions.

[@Michael-Martell]

I think a regional manager with several managers with several teams. Managers should only see their teams… etc. I’ve been thinking about how to make this works for several years now as I have learned to code.

[@ambicasupraja9651]

i am getting this error while sign up AuthApiError: duplicate key value violates unique constraint "user_pkey" as i am created trigger from sql editor

[@utomoyogafirmansyah7912]

But how to set role while we signup not with supabase?

[@rgorai1029]

I need this too 😭 did you ever figure it out?

[@utomoyogafirmansyah7912]

@@rgorai1029 yeah i make another table that containing userprofile and role and after signup an get token user need to set his role

[@thisismedg]

@@rgorai1029 me too

[@loribryant4999]

sir can you create a react version of this please I dont understang nextJS

[@loribryant4999]

hey bro can you updated this please I need this and the role please dont just put the role in it manuall make it dynamic, also please take it slow man you kind super fast

[@DailyWebCoding]

Build Role Access Dashboard with Next.js 14,Supabase, Shadcn,Tailwind kzbin.info/www/bejne/emilq6OsfbJpgKs

[@DailyWebCoding]

You can check this one

[@loribryant4999]

@@DailyWebCoding thank you sir, are you able to create a video like this with reactJS alone please

[@ahmedmusawir]

Your head is covering code ... we really didn't need to see your face ... we just needed to see code which we couldn't for your head which makes this video useless ...