Const
Verbatim from the forms_update_owner_or_admin RLS policy: 2 = supervisor, 3 = admin, 4 = a legacy super_user row still in production and deliberately NOT in ROLE_ID_TO_ROLE — so the rule is enforced on raw role ids in SQL, never via ctx.user.role.
forms_update_owner_or_admin
super_user
ROLE_ID_TO_ROLE
ctx.user.role
Verbatim from the
forms_update_owner_or_adminRLS policy: 2 = supervisor, 3 = admin, 4 = a legacysuper_userrow still in production and deliberately NOT inROLE_ID_TO_ROLE— so the rule is enforced on raw role ids in SQL, never viactx.user.role.