The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
An AI-built app passed every RLS test, but a live Supabase audit found leftover privileges and an undocumented function. Fixed: 28 → 11 privileges.
Passing every RLS test with extra grants still live is the classic AI-built app gap: the agent tests what it built, not what it left behind. A privilege audit belongs on every launch checklist.
Exactly. The agent checks the policies it wrote, but nobody checks what the platform granted by default. What surprised me most: Supabase's default privileges re-grant them on every new table, so it isn't a one-time fix. I now revoke-then-grant in every migration. Do you add a privilege check to your launch checklist too?
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Related posts
Umami Color & Finishing is an established color-grading studio in LA. Its work and reputation had outgrown its old site, and the studio was ready for one at the level of its work.
I designed and built it around the work itself: every project filterable by type and colorist, and every view with its own link, so the team can send a lead exactly what fits.
Case study
Live site: umamicolor.com
this is amazing work
Pulsix started with a question: how much of a sportswear identity can you fit on the front of a cap?
I designed the brand around an angular X with a pulse cut through its center. On a pink cap, the chartreuse X can stand alone. On a billboard, the photograph and “Future is now!” headline take the lead. In this loop, the black Pulsix logo anchors a moving grid of apparel, campaign graphics and digital layouts.
My roles: Brand Designer, Graphic Designer, Motion Designer.
Tools: Adobe Illustrator, Adobe After Effects, Figma.
Where would you try the X first: on the cap or in motion?
I'd try it on the cap first. Motion can borrow the pulse cut once the static X proves it holds up at small sizes, and the watch face already hints that it does. Did the pulse line change shape between the cap and the animated loop?
