<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>security on gabi cavalcante</title><link>https://gabicavalcante.dev/tags/security/</link><description>Recent content in security on gabi cavalcante</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Tue, 08 Sep 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://gabicavalcante.dev/tags/security/index.xml" rel="self" type="application/rss+xml"/><item><title>Demystifying Supabase authorization</title><link>https://gabicavalcante.dev/posts/demystifying-supabase-authorization/</link><pubDate>Tue, 08 Sep 2026 00:00:00 +0000</pubDate><guid>https://gabicavalcante.dev/posts/demystifying-supabase-authorization/</guid><description>&lt;p&gt;I was playing with Supabase and Next.js, after years of Postgres and Django, and some concepts were new for me. Working out what they meant took me through Postgres roles, privileges, policies, and a couple of things I had assumed for years without checking. Maybe what was new for me is new for you too :)&lt;/p&gt;</description></item></channel></rss>