App visible even if authentication enabled

I have tried to publish an app made to edit a postgres DB and for security reason I activated authentication but the published app is visible to everyone and changes to the DB can be made, I tried other browsers and incognito but there is no auth.

Please help now I have an exposed app with my database on it

Hi @matthew_mc-laughlin, welcome to the community!

Did you follow User authentication & permissions | Learn Plasmic to set permissions to require a non-anonymous role?