Identity & access

New accounts arrive with no access

The default role grants nothing at all, so a user who arrives by a route the application never sees — the Supabase dashboard, the admin API — cannot read drafts until somebody elevates them.

shipped