ADMIN DASHBOARD
Private order requests, payment tracking, inventory and catalog pricing.
Verifying administrator access…
Supabase sign-in and database permissions are checked before any private records load.
Matrix Peptides
Customer details remain stored with Netlify Forms. Payment statuses and stock are stored in Supabase.
Verified Netlify form submissions
Submitted requests are not confirmed payments. Review each transfer directly with your bank before marking verified.
Customer emails: After saving a changed order status, the server checks the Resend integration. Test mode routes messages to the administrator. An unchanged status does not send another email; use Send / Retry for a failed attempt. Order receipt: use Send / Retry Order Receipt on an existing verified request. v15 test mode sends only to your administrator email. Shipping/status emails are separate.
If this section is not configured yet, requests are still available under Netlify → Forms.
Catalog pricing and stock
Price changes are published to the public catalog through the pricing table. Exact stock remains private.
Security checklist
- Invite-only authentication; disable public signup in Supabase.
- Grant the admin role by confirmed Supabase user ID, not an editable profile field.
- Enable MFA in Supabase for the administrator when available.
- Never upload a Netlify personal access token or Supabase secret to public files.
- Only mark payments verified after checking deposits in your bank.
- Remove old test submissions containing customer information when no longer needed.
For complete setup details, read the included SETUP-ADMIN.md.