Admin Panel Best Practices

Database & APIs

I want to create an admin panel in my app to manage all the app databases easily. I see that there are two options.

  1. Create Hidden Admin Pages that will be only visible if the user document have field isAdmin == "true"

  2. Clone the project and create an admin project.

Which one would be the best option and why?

As I see, the first option is the easiest one. However, is there a way for anyone to bypass the visibility options and access the admin stuff? Are there any security risks on the first options?

What have you tried so far?

I am trying the first option and would love to stay there but I am wondering if there are security risks.

Did you check FlutterFlow's Documentation for this topic?
Yes
1 reply