Grant admin access to fmmusic821@gmail.com via email allowlist#63
Merged
Conversation
Adds fmmusic821@gmail.com to public.admin_email_allowlist, mirroring the founding-admin pattern. Admin access is tied to the email, so the role is auto-granted on sign-in (any provider) and survives resets/provider switches. Includes an idempotent backfill for the account if it already exists. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Eoi7McdsE29sJJthcn6wpY
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
Updates to Preview Branch (claude/admin-access-fmmusic821-dl0pwg) ↗︎
Tasks are run on every commit but only new migration files are pushed.
❌ Branch Error • Wed, 22 Jul 2026 16:17:22 UTC View logs for this Workflow Run ↗︎. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Grants full admin access to
fmmusic821@gmail.comby adding the email topublic.admin_email_allowlist, mirroring the existing founding-admin pattern.Admin access in this project is tied to the email, not a specific
auth.usersid, so this grant:adminrole on sign-in via any provider (handle_new_userresolves the allowlist on account creation), andThe allowlist table, RLS, auto-grant trigger, and role audit trigger already exist — this migration only seeds the new email and backfills the grant for the account if it exists. It is idempotent (
ON CONFLICT DO NOTHING).Changes
supabase/migrations/20260722170000_grant_fmmusic821_admin.sql— insertfmmusic821@gmail.cominto the admin email allowlist + idempotent admin-role backfill.Scope note
This is full admin — it unlocks all product features (search, teams, catalog, AI, recommendations, reports) and the
/admin/*operational backend (role management, user signups, entity merge/split, API clients, audit logs, data-quality, health, streaming rates, governance RPCs). It does not restrict the backend.Rollout
The equivalent grant has already been applied to the live Supabase project, so access is active. Merging this deploys the migration through the
deploy-supabaseAction for a reproducible, tracked change; the idempotent SQL makes re-application a no-op.🤖 Generated with Claude Code
https://claude.ai/code/session_01Eoi7McdsE29sJJthcn6wpY
Generated by Claude Code