FACTUAL ACTIVITY RECORD · An activity record based on work that took place
Cleaning up legacy Supabase Auth admin paths
Removing obsolete RPCs, policies, and Realtime after the Access migration while retaining required automation
Purpose
After the human admin interface moved to Access, legacy Supabase Auth admin RPCs, RLS policies, and Realtime delivery remained in the database definition. Obsolete authority had to be removed without breaking active automation.
Implementation
A migration removes the legacy human-admin RPCs and RLS policies along with the Realtime trigger, function, and heartbeat emission. RLS itself stays enabled. Collector ingest and heartbeat, Access admin RPCs, editorial draft submission, and the required read policies remain.
The Auth user needed by editorial automation remains. The former admin user also remains as a data owner because many messages are linked through ownership and deletion risks cascading data loss. A SQL contract checks removed and retained objects, execution privileges, and RLS state.
The implementation removes policies used only by the retired browser session and the Realtime notification no longer needed after HTTP polling. It is a subset, but every shown statement is exact.
Rendering diagram…
What was confirmed
Verification results
The migration contract confirmed that legacy RPCs, policies, and Realtime objects were absent while required service-role paths, draft submission, and read policies remained.
Types, documentation, and related tests were aligned with the new permission boundary, and the source-side cleanup was applied by the cutoff.
The migration had not yet been applied to the production database at the cutoff. Production removal was therefore unverified and remained follow-up work.
Basis for completion
This Activity was complete when the removal and retention boundary was fixed in the migration and contract tests and applied to source. Production application was outside this completion boundary.