From profiles.is_superadmin: RLS's is_superadmin() reads auth.uid(), absent on the admin client, so the caller resolves the flag.
profiles.is_superadmin
is_superadmin()
auth.uid()
The requesting user — matches forms.created_by for the creator branch.
forms.created_by
From
profiles.is_superadmin: RLS'sis_superadmin()readsauth.uid(), absent on the admin client, so the caller resolves the flag.