Hi all. I'm building my first web app with supabase, react, node. Users have points, and sometimes User A's points increase based on the actions (insert into table) of user B. My first instinct would be to use triggers and functions in supabase, but it says it's not prod ready. My current thinking is to have user B update user A's points, but that seems like it could be a security issue (no important data in my app but I want to use best practices) since any user would have permission to update any other users points. Any ideas on the best way forward with fewest vulnerabilities? I'm extremely new, I feel comfortable with react but still learning BE fundamentals

Triggers and functions are production ready as these are just standard Postgres features, what is being referred to as not being production ready is the UI inside of the dashboard.

Thanks! That makes sense