Who made you admin? Ember checks your Supabase role column

Supabase RLS decides which rows a user can update, not which columns. If role lives on profiles and users can update their row, they can promote themselves.