Admin access is gated by user_profiles.role = 'admin' only. The permission model is not final: [PLACEHOLDER: ADMIN AUTHENTICATION / PERMISSIONS]
product_documents table (datasheet, manual, warranty, certificate, image) stored in the private product-documents bucket, plus datasheet URLs recorded on products.