fix(courses): use admin client for all teacher course sub-pages to fix RLS

Same root cause as the course detail page: RLS get_tenant_id() reads JWT
claims which don't match the subdomain tenant. All 15 teacher course
sub-pages (lessons, exams, exercises, certificates, settings, preview,
community) now use createAdminClient() with manual tenant_id filtering.

Auth validation via getCurrentUserId() and tenant isolation via
getCurrentTenantId() (from middleware header) remain in place.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: guillermoscript

app/[locale]/dashboard/teacher/courses/[courseId]/certificates/page.tsx

@@ -1,4 +1,4 @@
-import { createClient } from '@/lib/supabase/server'
+import { createAdminClient } from '@/lib/supabase/admin'
 import { redirect, notFound } from 'next/navigation'
 import Link from 'next/link'
 import { getTranslations } from 'next-intl/server'
@@ -17,7 +17,7 @@ interface PageProps {
 
 export default async function CertificatesPage({ params }: PageProps) {
   const { courseId } = await params
-  const supabase = await createClient()
+  const supabase = createAdminClient()
   const t = await getTranslations('dashboard.teacher.manageCourse')
   const tenantId = await getCurrentTenantId()
 

app/[locale]/dashboard/teacher/courses/[courseId]/certificates/settings/page.tsx

@@ -1,4 +1,4 @@
-import { createClient } from '@/lib/supabase/server'
+import { createAdminClient } from '@/lib/supabase/admin'
 import { redirect, notFound } from 'next/navigation'
 import Link from 'next/link'
 import { getTranslations } from 'next-intl/server'
@@ -31,7 +31,7 @@ interface PageProps {
 
 export default async function CertificateSettingsPage({ params }: PageProps) {
     const { courseId } = await params
-    const supabase = await createClient()
+    const supabase = createAdminClient()
     const t = await getTranslations('dashboard.teacher.manageCourse')
     const tenantId = await getCurrentTenantId()
 

app/[locale]/dashboard/teacher/courses/[courseId]/community/page.tsx

@@ -1,4 +1,3 @@
-import { createClient } from '@/lib/supabase/server'
 import { createAdminClient } from '@/lib/supabase/admin'
 import {getCurrentTenantId, getCurrentUserId } from '@/lib/supabase/tenant'
 import { getUserRole } from '@/lib/supabase/get-user-role'
@@ -16,7 +15,6 @@ interface PageProps {
 export default async function TeacherCourseCommunityPage({ params }: PageProps) {
   const { courseId } = await params
   const t = await getTranslations('community')
-  const supabase = await createClient()
   const tenantId = await getCurrentTenantId()
   const role = await getUserRole()
   const numericCourseId = parseInt(courseId)
@@ -50,7 +48,7 @@ export default async function TeacherCourseCommunityPage({ params }: PageProps)
   }
 
   // Check plan features for community access
-  const { data: planFeatures } = await supabase.rpc('get_plan_features', { _tenant_id: tenantId })
+  const { data: planFeatures } = await adminClient.rpc('get_plan_features', { _tenant_id: tenantId })
 
   if (!planFeatures?.features?.community) {
     return (

app/[locale]/dashboard/teacher/courses/[courseId]/exams/[examId]/page.tsx

@@ -1,4 +1,4 @@
-import { createClient } from '@/lib/supabase/server'
+import { createAdminClient } from '@/lib/supabase/admin'
 import { getTranslations } from 'next-intl/server'
 import { redirect, notFound } from 'next/navigation'
 import dynamic from 'next/dynamic'
@@ -28,7 +28,7 @@ interface PageProps {
 
 export default async function EditExamPage({ params }: PageProps) {
   const { courseId, examId } = await params
-  const supabase = await createClient()
+  const supabase = createAdminClient()
   const t = await getTranslations('dashboard.teacher.manageCourse')
   const tenantId = await getCurrentTenantId()
 

app/[locale]/dashboard/teacher/courses/[courseId]/exams/[examId]/submissions/[submissionId]/page.tsx

@@ -1,4 +1,4 @@
-import { createClient } from '@/lib/supabase/server'
+import { createAdminClient } from '@/lib/supabase/admin'
 import { notFound, redirect } from 'next/navigation'
 import { getTranslations } from 'next-intl/server'
 import { SubmissionReview } from '@/components/teacher/submission-review'
@@ -9,7 +9,7 @@ import { revalidatePath } from 'next/cache'
 import {getCurrentTenantId, getCurrentUserId } from '@/lib/supabase/tenant'
 
 export default async function SubmissionDetailPage({ params }: { params: Promise<{ courseId: string; examId: string; submissionId: string }> }) {
-  const supabase = await createClient()
+  const supabase = createAdminClient()
   const tenantId = await getCurrentTenantId()
   const t = await getTranslations('dashboard.teacher')
   const userId = await getCurrentUserId()
@@ -124,7 +124,7 @@ export default async function SubmissionDetailPage({ params }: { params: Promise
     }[]
   }) => {
     'use server'
-    const supabase = await createClient()
+    const supabase = createAdminClient()
     const userId = await getCurrentUserId()
     if (!userId) return
 

app/[locale]/dashboard/teacher/courses/[courseId]/exams/[examId]/submissions/page.tsx

@@ -1,4 +1,4 @@
-import { createClient } from '@/lib/supabase/server'
+import { createAdminClient } from '@/lib/supabase/admin'
 import { notFound } from 'next/navigation'
 import Link from 'next/link'
 import { getTranslations } from 'next-intl/server'
@@ -8,7 +8,7 @@ import { ExamSubmissionsReview } from '@/components/teacher/exam-submissions-rev
 import {getCurrentTenantId, getCurrentUserId } from '@/lib/supabase/tenant'
 
 export default async function SubmissionsPage({ params }: { params: Promise<{ courseId: string; examId: string }> }) {
-  const supabase = await createClient()
+  const supabase = createAdminClient()
   const tenantId = await getCurrentTenantId()
   const t = await getTranslations('dashboard.teacher')
   const userId = await getCurrentUserId()

app/[locale]/dashboard/teacher/courses/[courseId]/exams/new/page.tsx

@@ -1,4 +1,4 @@
-import { createClient } from '@/lib/supabase/server'
+import { createAdminClient } from '@/lib/supabase/admin'
 import { notFound } from 'next/navigation'
 import dynamic from 'next/dynamic'
 import { Skeleton } from '@/components/ui/skeleton'
@@ -27,7 +27,7 @@ interface PageProps {
 
 export default async function NewExamPage({ params }: PageProps) {
   const { courseId } = await params
-  const supabase = await createClient()
+  const supabase = createAdminClient()
   const tenantId = await getCurrentTenantId()
 
   const userId = await getCurrentUserId()

app/[locale]/dashboard/teacher/courses/[courseId]/exercises/[exerciseId]/page.tsx

@@ -1,4 +1,4 @@
-import { createClient } from '@/lib/supabase/server'
+import { createAdminClient } from '@/lib/supabase/admin'
 import { notFound, redirect } from 'next/navigation'
 import { getTranslations } from 'next-intl/server'
 import dynamic from 'next/dynamic'
@@ -29,7 +29,7 @@ interface PageProps {
 
 export default async function EditExercisePage({ params }: PageProps) {
   const { courseId, exerciseId } = await params
-  const supabase = await createClient()
+  const supabase = createAdminClient()
   const t = await getTranslations('dashboard.teacher.manageCourse')
   const tEx = await getTranslations('dashboard.teacher.exerciseBuilder')
   const tenantId = await getCurrentTenantId()

app/[locale]/dashboard/teacher/courses/[courseId]/exercises/new/page.tsx

@@ -1,4 +1,4 @@
-import { createClient } from '@/lib/supabase/server'
+import { createAdminClient } from '@/lib/supabase/admin'
 import { notFound } from 'next/navigation'
 import { getTranslations } from 'next-intl/server'
 import dynamic from 'next/dynamic'
@@ -28,7 +28,7 @@ interface PageProps {
 
 export default async function NewExercisePage({ params }: PageProps) {
   const { courseId } = await params
-  const supabase = await createClient()
+  const supabase = createAdminClient()
   const t = await getTranslations('dashboard.teacher.manageCourse')
   const tEx = await getTranslations('dashboard.teacher.exerciseBuilder')
   const tenantId = await getCurrentTenantId()

app/[locale]/dashboard/teacher/courses/[courseId]/exercises/page.tsx

@@ -1,4 +1,4 @@
-import { createClient } from '@/lib/supabase/server'
+import { createAdminClient } from '@/lib/supabase/admin'
 import { notFound } from 'next/navigation'
 import Link from 'next/link'
 import { getTranslations } from 'next-intl/server'
@@ -21,7 +21,7 @@ import * as motion from 'motion/react-client'
 import {getCurrentTenantId, getCurrentUserId } from '@/lib/supabase/tenant'
 
 export default async function ExercisesPage({ params }: { params: Promise<{ courseId: string }> }) {
-  const supabase = await createClient()
+  const supabase = createAdminClient()
   const t = await getTranslations('dashboard.teacher.manageCourse')
   const tenantId = await getCurrentTenantId()
   const userId = await getCurrentUserId()