Supabase view bypasses RLS? Fix it with security_invoker (and lock down SECURITY DEFINER functions)

Disclosure: we build SniffPup, a free passive scanner for live sites. This guide was first published on our site. The SQL follows Supabase's own docs and works without our tool. First published on sni