Building a mobile app where each user has their own data
(documents, notes, tracked dates). Using Supabase Auth +
Postgres RLS.
Current approach:
- Every table has user_id uuid references auth.users
- Single policy: `auth.uid() = user_id` for all CRUD
Question: is this enough for a real production app, or am
I missing something obvious? Seen people add extra checks
in Edge Functions but feels redundant if RLS is on.
Stack: React Native (Expo) + Supabase.