New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security BUG in the "How To Setup Logout Flow & App Deployment : RLS Series" videos #52

Open

LeonidShamis opened this issue Feb 8, 2025 · 0 comments

LeonidShamis commented Feb 8, 2025

Hi,

You can see the issue at 5:09:

When the user logs in with "[email protected]", you can see the records owned by "[email protected]" briefly displayed, then removed and replaced with the records belonging to "[email protected]".

The same occurs when users logs out of the session for "[email protected]" at 5:25 and logs in with "[email protected]" - records belonging to "[email protected]" are shown for a seconds, then removed and replaced by the records owned by "[email protected]".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment