MFA Enhancements for RLS and Super Admin

The version 2.5.0 of Makerkit is now available. This release includes several enhancements to the Makerkit Super Admin and RLS (Row Level Security) features:

1. RLS When a use opted-in to MFA, our new RLS rules will be enforced at the database level, not only at the application level
2. Super Admin The Super Admin user will be required to use MFA to access the Super Admin panel. This is to ensure that the Super Admin user is not compromised by a malicious user who can access the Super Admin panel without MFA
3. Tests: we have enriched the E2E tests with tests for the Super Admin and MFA features

New DB functions

In addition, we have added two more DB functions you can use throughout your application:

1. public.is_super_admin(): Returns true if the authenticated user is a super admin
2. public.is_mfa_compliant(): This function return true if the user opted in to MFA and has logged in with MFA or the user has not opted in to MFA. This makes MFA optional for users, but mandatory for users who opted into MFA.

Super Admin

If you have a Super Admin user, please make sure to enable MFA for the user otherwise it won't be possible to access the Super Admin panel and its features.