Notes · SaaS
Building a SaaS with Next.js and Supabase
SaaS · Supabase · RBAC
Auth, RBAC, and tenant boundaries from HomestayVN — without premature microservice complexity.
Homestay operators do not buy architecture diagrams. They buy a workspace that keeps each property’s data separate and usable.
Next.js handles product UI and session-aware routes. Supabase Auth plus PostgreSQL policies enforce tenant boundaries close to the data.
RBAC only stays maintainable when memberships and roles live in the data model, not as one-off conditionals on every page.