https://viberaven.dev/supabase-security-definer-function-anon
VibeRaven | Supabase security definer functions and the anon key
Postgres lets every role run a new function, and a security definer function owned by postgres skips RLS. Find yours and close the ones anon should not call.
the anonsupabasesecuritydefinerfunctions