Pain point · Permissions & security · Blocks work
Studio impersonation ignores custom access token hook
1 source thread · first seen 2024-07
Summary
Impersonating a user in Studio does not call the Custom Access Token Hook, so permissions seen differ from production behavior.
- Affects
- Teams using auth hooks with RLS
Evidence
Excerpts are copied word for word from the source; follow the link to read it in full.
“Supabase Studio by all means must reflect production behaviour when it comes to impersonation”