At least 7 people shot, 1 fatally in Elizabeth, New Jersey, sources tell RLS Media.
October 27, 2026 at 3:58 AM
At least 7 people shot, 1 fatally in Elizabeth, New Jersey, sources tell RLS Media.
My actual concern is that RLS' DSA work appears to be limited to one caucus.
i'm laughing so hard i'm running out of oxygen
October 25, 2026 at 7:05 PM
My actual concern is that RLS' DSA work appears to be limited to one caucus.
No you see RLs do it for honorable reasons while arcade games do it to screw YOU over personally
October 25, 2026 at 12:01 PM
No you see RLs do it for honorable reasons while arcade games do it to screw YOU over personally
Supabase's MCP server runs tools as the signed-in user, letting Postgres RLS enforce row access. No service-role key for the agent. But RLS doesn't authorize external actions; those tools still need business checks.
supabase.com/blog/give-yo...
supabase.com/blog/give-yo...
Give your Supabase app its own MCP server
Every tool call runs as the signed-in user, so existing Postgres RLS policies control which rows agents can access.
supabase.com
October 27, 2026 at 7:45 AM
Supabase's MCP server runs tools as the signed-in user, letting Postgres RLS enforce row access. No service-role key for the agent. But RLS doesn't authorize external actions; those tools still need business checks.
supabase.com/blog/give-yo...
supabase.com/blog/give-yo...
#後で読む 用メモです→
RLS を書いても塞がらない穴が 3 つあった 旅行SNSを作った記録13
RLS を書いても塞がらない穴が 3 つあった 旅行SNSを作った記録13
RLS を書いても塞がらない穴が 3 つあった ── 旅行SNSを作った記録（13） - Qiita
Supabase の RLS（行単位のアクセス制御）を書けば守れる、と思っていました。書いたあとに、RLS では塞がらない穴が 3 つあると分かりました。 やったこと（3 ステップ） RLS の位置づけを「主」から「保険」に書き換える 権限に関わる列と、RLS を回避す...
qiita.com
October 27, 2026 at 11:59 AM
#後で読む 用メモです→
RLS を書いても塞がらない穴が 3 つあった 旅行SNSを作った記録13
RLS を書いても塞がらない穴が 3 つあった 旅行SNSを作った記録13
Important one. The security advisor in the Supabase dashboard flags tables with RLS off, worth running before every launch.
October 28, 2026 at 7:33 PM
Important one. The security advisor in the Supabase dashboard flags tables with RLS off, worth running before every launch.
RLS casually roasting someone in a letter, describing him as "an old missionary with the unpromising name of Pratt" XD
#RLSletters
#RLSletters
October 23, 2026 at 2:34 PM
RLS casually roasting someone in a letter, describing him as "an old missionary with the unpromising name of Pratt" XD
#RLSletters
#RLSletters
Chris van Eijk measured ten causes of Supabase RLS policies returning nothing failing or leaking on PostgreSQL 17. DB geeks get details on Supabase roles and auth.uid(). RLS remains delightfully literal.\nhttps://postgr.es/p/9zG
Chris van Eijk: Supabase RLS policy not working? Ten causes, measured
https://postgr.es/p/9zG
postgr.es
October 24, 2026 at 1:08 PM
Chris van Eijk measured ten causes of Supabase RLS policies returning nothing failing or leaking on PostgreSQL 17. DB geeks get details on Supabase roles and auth.uid(). RLS remains delightfully literal.\nhttps://postgr.es/p/9zG
The anual coffee budget of most medium sized companies would likely dwarf what the RLS sends to NYC.
October 25, 2026 at 7:17 PM
The anual coffee budget of most medium sized companies would likely dwarf what the RLS sends to NYC.
Ask your AI tool: which tables does the browser touch, with which role, under which RLS policy? Anything without an answer needs attention before 30 Oct.
stacksiren.com/issues/supab...
stacksiren.com/issues/supab...
Supabase 42501 'permission denied for table': RLS explained
How Supabase grants and Row Level Security work together, why new tables return 42501 permission denied from 30 October 2026, and how to fix it safely.
stacksiren.com
October 27, 2026 at 8:20 PM
Ask your AI tool: which tables does the browser touch, with which role, under which RLS policy? Anything without an answer needs attention before 30 Oct.
stacksiren.com/issues/supab...
stacksiren.com/issues/supab...
danke. hab jetzt schon was eigenes zur rls veröffentlicht
October 28, 2026 at 2:51 PM
danke. hab jetzt schon was eigenes zur rls veröffentlicht
thanks everyone who stopped by for day 2 of the rls exorcism streams featuring me as 'Al Jesus'. too many great moments so i'll just leave this one here
October 27, 2026 at 6:23 AM
thanks everyone who stopped by for day 2 of the rls exorcism streams featuring me as 'Al Jesus'. too many great moments so i'll just leave this one here
Air to Ground Message:
COPY RLS 10 THANKS/EE/ JUST TRYING TO STAY BY THE BOOK LOL
Area: Jacksonville, FL, USA
Type: Embraer 175 (Enhanced Wing)
A: #a1ddcd74392
F: #f6cd2327472
COPY RLS 10 THANKS/EE/ JUST TRYING TO STAY BY THE BOOK LOL
Area: Jacksonville, FL, USA
Type: Embraer 175 (Enhanced Wing)
A: #a1ddcd74392
F: #f6cd2327472
October 25, 2026 at 4:50 PM
Air to Ground Message:
COPY RLS 10 THANKS/EE/ JUST TRYING TO STAY BY THE BOOK LOL
Area: Jacksonville, FL, USA
Type: Embraer 175 (Enhanced Wing)
A: #a1ddcd74392
F: #f6cd2327472
COPY RLS 10 THANKS/EE/ JUST TRYING TO STAY BY THE BOOK LOL
Area: Jacksonville, FL, USA
Type: Embraer 175 (Enhanced Wing)
A: #a1ddcd74392
F: #f6cd2327472
The easiest security win most indie apps skip isn't code: 2FA on every account that can change your app.
GitHub, your host, your database dashboard, your domain registrar, and the email behind them all. One phished password there beats any RLS policy. #buildinpublic
GitHub, your host, your database dashboard, your domain registrar, and the email behind them all. One phished password there beats any RLS policy. #buildinpublic
October 26, 2026 at 12:40 PM
The easiest security win most indie apps skip isn't code: 2FA on every account that can change your app.
GitHub, your host, your database dashboard, your domain registrar, and the email behind them all. One phished password there beats any RLS policy. #buildinpublic
GitHub, your host, your database dashboard, your domain registrar, and the email behind them all. One phished password there beats any RLS policy. #buildinpublic
Air to Ground Message:
RANDOM QUESTION DO U KNOW WHAT THE ASTERISK MEANS NEXT TO THE CAPT NAME ON RLS
Area: Philadelphia, PA, USA
Type: Boeing 737-800
A: #ad3ef3b3135
F: #f3ca7184ed0
RANDOM QUESTION DO U KNOW WHAT THE ASTERISK MEANS NEXT TO THE CAPT NAME ON RLS
Area: Philadelphia, PA, USA
Type: Boeing 737-800
A: #ad3ef3b3135
F: #f3ca7184ed0
October 24, 2026 at 6:18 PM
Air to Ground Message:
RANDOM QUESTION DO U KNOW WHAT THE ASTERISK MEANS NEXT TO THE CAPT NAME ON RLS
Area: Philadelphia, PA, USA
Type: Boeing 737-800
A: #ad3ef3b3135
F: #f3ca7184ed0
RANDOM QUESTION DO U KNOW WHAT THE ASTERISK MEANS NEXT TO THE CAPT NAME ON RLS
Area: Philadelphia, PA, USA
Type: Boeing 737-800
A: #ad3ef3b3135
F: #f3ca7184ed0
"Over the last 13 years, Berlin has sent millions to this office."
Given that the field office is on Madison Avenue (rosalux.nyc), I'm guessing that just about covers 13 years of rent, utilities, and payroll?
Given that the field office is on Madison Avenue (rosalux.nyc), I'm guessing that just about covers 13 years of rent, utilities, and payroll?
Home Page - RLS-NYC
RLS-NYC is the New York Office of the Rosa Luxemburg Stiftung, an internationally operating, progressive non-profit institution for civic education.
rosalux.nyc
October 25, 2026 at 5:50 PM
"Over the last 13 years, Berlin has sent millions to this office."
Given that the field office is on Madison Avenue (rosalux.nyc), I'm guessing that just about covers 13 years of rent, utilities, and payroll?
Given that the field office is on Madison Avenue (rosalux.nyc), I'm guessing that just about covers 13 years of rent, utilities, and payroll?
Your Supabase anon key is in every visitor's browser. With RLS off, so is your data.
If you built it with Lovable, Bolt or Cursor, check every table's Row Level Security before launch.
Save this, and tell me: which AI builder are you shipping with? #supabase
If you built it with Lovable, Bolt or Cursor, check every table's Row Level Security before launch.
Save this, and tell me: which AI builder are you shipping with? #supabase
October 28, 2026 at 11:43 AM
Your Supabase anon key is in every visitor's browser. With RLS off, so is your data.
If you built it with Lovable, Bolt or Cursor, check every table's Row Level Security before launch.
Save this, and tell me: which AI builder are you shipping with? #supabase
If you built it with Lovable, Bolt or Cursor, check every table's Row Level Security before launch.
Save this, and tell me: which AI builder are you shipping with? #supabase
SNS開発の裏側、noteで公開中。
SupabaseのRLS設計とか、AdSense審査の話とか。
個人開発者の参考になれば。
https://the111.netlify.app
#個人開発 #Supabase #NextJS
SupabaseのRLS設計とか、AdSense審査の話とか。
個人開発者の参考になれば。
https://the111.netlify.app
#個人開発 #Supabase #NextJS
October 27, 2026 at 1:19 AM
SNS開発の裏側、noteで公開中。
SupabaseのRLS設計とか、AdSense審査の話とか。
個人開発者の参考になれば。
https://the111.netlify.app
#個人開発 #Supabase #NextJS
SupabaseのRLS設計とか、AdSense審査の話とか。
個人開発者の参考になれば。
https://the111.netlify.app
#個人開発 #Supabase #NextJS
Chris van Eijk tests four Supabase RLS policy sets on PostgreSQL 17 with Supabase roles. Own rows public read teams without recursion and JWT admins. Row security gets a workout.\nhttps://postgr.es/p/9zF
Chris van Eijk: Supabase RLS policy examples, tested on PostgreSQL 17
https://postgr.es/p/9zF
postgr.es
October 24, 2026 at 1:03 PM
Chris van Eijk tests four Supabase RLS policy sets on PostgreSQL 17 with Supabase roles. Own rows public read teams without recursion and JWT admins. Row security gets a workout.\nhttps://postgr.es/p/9zF
i did a program in the bundestag in 2014 and we had seminars at all the stiftungen including RLS. i was still pretty libbed up at the time so was not very receptive to the politics, but we had fun at karaoke afterwards lol
October 25, 2026 at 5:19 PM
i did a program in the bundestag in 2014 and we had seminars at all the stiftungen including RLS. i was still pretty libbed up at the time so was not very receptive to the politics, but we had fun at karaoke afterwards lol
WE ARE LIVE NOW WITH THE EXORCISM OF PINEAPPLE JANE!
JUMP IN FOR NIGHT 1 OF THE BIGGEST RLS EVENT IN HISTORY!
twitch.tv/reloadlastsave
JUMP IN FOR NIGHT 1 OF THE BIGGEST RLS EVENT IN HISTORY!
twitch.tv/reloadlastsave
twtich.tv
October 25, 2026 at 1:06 AM
WE ARE LIVE NOW WITH THE EXORCISM OF PINEAPPLE JANE!
JUMP IN FOR NIGHT 1 OF THE BIGGEST RLS EVENT IN HISTORY!
twitch.tv/reloadlastsave
JUMP IN FOR NIGHT 1 OF THE BIGGEST RLS EVENT IN HISTORY!
twitch.tv/reloadlastsave
good distinction. one more gap worth checking: a security definer function those tools can call runs as its owner, which on supabase is usually postgres, so RLS doesn't apply inside it. each of those needs its own auth.uid() check.
October 27, 2026 at 11:36 PM
good distinction. one more gap worth checking: a security definer function those tools can call runs as its owner, which on supabase is usually postgres, so RLS doesn't apply inside it. each of those needs its own auth.uid() check.
Air to Ground Message:
Copy rls 10 thanks/ee/ just trying to stay by the book lol
Area: Jacksonville, FL, USA
Type: Embraer 175 (Enhanced Wing)
A: #a1ddcd74392
F: #f6cd2327472
Copy rls 10 thanks/ee/ just trying to stay by the book lol
Area: Jacksonville, FL, USA
Type: Embraer 175 (Enhanced Wing)
A: #a1ddcd74392
F: #f6cd2327472
October 25, 2026 at 4:50 PM
Air to Ground Message:
Copy rls 10 thanks/ee/ just trying to stay by the book lol
Area: Jacksonville, FL, USA
Type: Embraer 175 (Enhanced Wing)
A: #a1ddcd74392
F: #f6cd2327472
Copy rls 10 thanks/ee/ just trying to stay by the book lol
Area: Jacksonville, FL, USA
Type: Embraer 175 (Enhanced Wing)
A: #a1ddcd74392
F: #f6cd2327472
