🔑 Admin Access

Admin access is now controlled by your Supabase profiles.role column instead of a shared password — anyone logged in with role = 'admin' can reach this panel, and everyone else is redirected. To grant or revoke admin access for someone, update their role in the Users tab's underlying table (or directly in the Supabase dashboard). Make sure your Row Level Security policies also check this role before allowing writes — a client-side check alone doesn't stop direct API calls.