RLS Anyone Can Count, but NOT Read

hearts
- pid (fk to posts.id)
- uid (fk to users.id)
(pk = pid + uid)

(role() = 'authenticated'::text)
AND (uid = uid())
AND (uid() = (SELECT posts.author FROM posts WHERE (posts.id = hearts.pid)))

// pid is the post id
const q2 = supabase.from('hearts')
  .select('pid', { count: 'exact' })
  .eq('pid', pid);