some ppl have opined his rls with xion and (esp) roxas is more primarily about him trying to regain a sense of friendship lost with isa, and i dont disagree with that. but i also think its not Mostly or Only that, and xion and roxas have their own perspectives.. though i do think days ultimately
October 28, 2026 at 11:01 PM
some ppl have opined his rls with xion and (esp) roxas is more primarily about him trying to regain a sense of friendship lost with isa, and i dont disagree with that. but i also think its not Mostly or Only that, and xion and roxas have their own perspectives.. though i do think days ultimately
Important one. The security advisor in the Supabase dashboard flags tables with RLS off, worth running before every launch.
October 28, 2026 at 7:33 PM
Important one. The security advisor in the Supabase dashboard flags tables with RLS off, worth running before every launch.
danke. hab jetzt schon was eigenes zur rls veröffentlicht
October 28, 2026 at 2:51 PM
danke. hab jetzt schon was eigenes zur rls veröffentlicht
Your Supabase anon key is in every visitor's browser. With RLS off, so is your data.
If you built it with Lovable, Bolt or Cursor, check every table's Row Level Security before launch.
Save this, and tell me: which AI builder are you shipping with? #supabase
If you built it with Lovable, Bolt or Cursor, check every table's Row Level Security before launch.
Save this, and tell me: which AI builder are you shipping with? #supabase
October 28, 2026 at 11:43 AM
Your Supabase anon key is in every visitor's browser. With RLS off, so is your data.
If you built it with Lovable, Bolt or Cursor, check every table's Row Level Security before launch.
Save this, and tell me: which AI builder are you shipping with? #supabase
If you built it with Lovable, Bolt or Cursor, check every table's Row Level Security before launch.
Save this, and tell me: which AI builder are you shipping with? #supabase
Supabase grant change is 2 days away. Open Security Advisor in the dashboard, deal with any RLS warnings, then make sure new migrations carry explicit grants.
stacksiren.com/blog/supabas...
stacksiren.com/blog/supabas...
Supabase stops auto-exposing new tables on 30 October 2026
From 30 Oct 2026, Supabase no longer automatically exposes new public tables to its Data API. The timeline, who's affected and what to change before the day.
stacksiren.com
October 28, 2026 at 9:13 AM
Supabase grant change is 2 days away. Open Security Advisor in the dashboard, deal with any RLS warnings, then make sure new migrations carry explicit grants.
stacksiren.com/blog/supabas...
stacksiren.com/blog/supabas...
1. Other users can see your customers' data.
Test: sign up a second account on your live app, open every list page. See the first account's orders or invoices? A table's RLS policy is too open. Usually using (true).
Test: sign up a second account on your live app, open every list page. See the first account's orders or invoices? A table's RLS policy is too open. Usually using (true).
October 28, 2026 at 9:03 AM
1. Other users can see your customers' data.
Test: sign up a second account on your live app, open every list page. See the first account's orders or invoices? A table's RLS policy is too open. Usually using (true).
Test: sign up a second account on your live app, open every list page. See the first account's orders or invoices? A table's RLS policy is too open. Usually using (true).
I've been on the related gabapentin for more than a decade now. I never had withdrawal from that one... Others, such as SSRIs had horrible side effects.
Gabapentin works for my RLS but my dad uses lyrica for his.
Gabapentin works for my RLS but my dad uses lyrica for his.
October 28, 2026 at 6:21 AM
I've been on the related gabapentin for more than a decade now. I never had withdrawal from that one... Others, such as SSRIs had horrible side effects.
Gabapentin works for my RLS but my dad uses lyrica for his.
Gabapentin works for my RLS but my dad uses lyrica for his.
got an email from supabase about oct 30 and not sure it's about you? supabase plans to change how new tables work on existing projects. once it reaches yours, a new table can show 42501 "permission denied for table" until you grant access. old tables keep working. plain steps in the card.
Seeing a permission denied (42501) error after Oct 30? Here's the safe fix
New Supabase table failing with 42501 after Oct 30? Grant only what it needs, keep RLS on, and re-test. Plain steps and safe SQL.
patchandship.com
October 27, 2026 at 11:44 PM
got an email from supabase about oct 30 and not sure it's about you? supabase plans to change how new tables work on existing projects. once it reaches yours, a new table can show 42501 "permission denied for table" until you grant access. old tables keep working. plain steps in the card.
good distinction. one more gap worth checking: a security definer function those tools can call runs as its owner, which on supabase is usually postgres, so RLS doesn't apply inside it. each of those needs its own auth.uid() check.
October 27, 2026 at 11:36 PM
good distinction. one more gap worth checking: a security definer function those tools can call runs as its owner, which on supabase is usually postgres, so RLS doesn't apply inside it. each of those needs its own auth.uid() check.
good question. after any config push i'd open the live app logged out in a private window and see what still loads, then check dashboard > advisors > security advisor for tables with RLS off. the login redirect one is a good catch, it's easy to miss.
October 27, 2026 at 11:36 PM
good question. after any config push i'd open the live app logged out in a private window and see what still loads, then check dashboard > advisors > security advisor for tables with RLS off. the login redirect one is a good catch, it's easy to miss.
Ask your AI tool: which tables does the browser touch, with which role, under which RLS policy? Anything without an answer needs attention before 30 Oct.
stacksiren.com/issues/supab...
stacksiren.com/issues/supab...
Supabase 42501 'permission denied for table': RLS explained
How Supabase grants and Row Level Security work together, why new tables return 42501 permission denied from 30 October 2026, and how to fix it safely.
stacksiren.com
October 27, 2026 at 8:20 PM
Ask your AI tool: which tables does the browser touch, with which role, under which RLS policy? Anything without an answer needs attention before 30 Oct.
stacksiren.com/issues/supab...
stacksiren.com/issues/supab...
Basically zero sleep. Valium no longer fully stops my RLS and doesn't put me to sleep anymore. Suing myself for emotional distress
October 27, 2026 at 6:32 PM
Basically zero sleep. Valium no longer fully stops my RLS and doesn't put me to sleep anymore. Suing myself for emotional distress
Mr Thomson, the 'curat' of Anstruther Easter, was a man highly obnoxious to the devout... find out why at Typewronger's annual event to mark the birthday of Robert Louis Stevenson, with a new zine and a talk by RLS biographer Jeremy Hodges.
October 27, 2026 at 4:17 PM
Mr Thomson, the 'curat' of Anstruther Easter, was a man highly obnoxious to the devout... find out why at Typewronger's annual event to mark the birthday of Robert Louis Stevenson, with a new zine and a talk by RLS biographer Jeremy Hodges.
#後で読む 用メモです→
RLS を書いても塞がらない穴が 3 つあった 旅行SNSを作った記録13
RLS を書いても塞がらない穴が 3 つあった 旅行SNSを作った記録13
RLS を書いても塞がらない穴が 3 つあった ── 旅行SNSを作った記録（13） - Qiita
Supabase の RLS（行単位のアクセス制御）を書けば守れる、と思っていました。書いたあとに、RLS では塞がらない穴が 3 つあると分かりました。 やったこと（3 ステップ） RLS の位置づけを「主」から「保険」に書き換える 権限に関わる列と、RLS を回避す...
qiita.com
October 27, 2026 at 11:59 AM
#後で読む 用メモです→
RLS を書いても塞がらない穴が 3 つあった 旅行SNSを作った記録13
RLS を書いても塞がらない穴が 3 つあった 旅行SNSを作った記録13
Good distinction. RLS covers what the agent can read, not where it sends it. If one of those external actions calls a third-party API with user rows, that's a new recipient for GDPR too, so it belongs in the same business check.
October 27, 2026 at 10:33 AM
Good distinction. RLS covers what the agent can read, not where it sends it. If one of those external actions calls a third-party API with user rows, that's a new recipient for GDPR too, so it belongs in the same business check.
Hrm... I mean, if we really wanna spice it up, make it so it happens to -EVERY- gainer/feedee whenever ANYONE with RLS bounces, hehehe.
I'd say we could watch countless massive lard-blimps blow up the world over, but I doubt either of us will see anything past our own cheeks and brows.
I'd say we could watch countless massive lard-blimps blow up the world over, but I doubt either of us will see anything past our own cheeks and brows.
October 27, 2026 at 9:09 AM
Hrm... I mean, if we really wanna spice it up, make it so it happens to -EVERY- gainer/feedee whenever ANYONE with RLS bounces, hehehe.
I'd say we could watch countless massive lard-blimps blow up the world over, but I doubt either of us will see anything past our own cheeks and brows.
I'd say we could watch countless massive lard-blimps blow up the world over, but I doubt either of us will see anything past our own cheeks and brows.
Supabase's MCP server runs tools as the signed-in user, letting Postgres RLS enforce row access. No service-role key for the agent. But RLS doesn't authorize external actions; those tools still need business checks.
supabase.com/blog/give-yo...
supabase.com/blog/give-yo...
Give your Supabase app its own MCP server
Every tool call runs as the signed-in user, so existing Postgres RLS policies control which rows agents can access.
supabase.com
October 27, 2026 at 7:45 AM
Supabase's MCP server runs tools as the signed-in user, letting Postgres RLS enforce row access. No service-role key for the agent. But RLS doesn't authorize external actions; those tools still need business checks.
supabase.com/blog/give-yo...
supabase.com/blog/give-yo...
thanks everyone who stopped by for day 2 of the rls exorcism streams featuring me as 'Al Jesus'. too many great moments so i'll just leave this one here
October 27, 2026 at 6:23 AM
thanks everyone who stopped by for day 2 of the rls exorcism streams featuring me as 'Al Jesus'. too many great moments so i'll just leave this one here
New listing on 👉Biconomy
Coin: #RLS
Pairs:
#RLSUSDT quote:#USDT
#newcoinlisting #crypto #cryptonews #cryptoAlerts #altcoins #bitcoin #btc #blockchain #cryptocurrency #cryptotrading
Coin: #RLS
Pairs:
#RLSUSDT quote:#USDT
#newcoinlisting #crypto #cryptonews #cryptoAlerts #altcoins #bitcoin #btc #blockchain #cryptocurrency #cryptotrading
Biconomy | Buy/Sell Bitcoin, Ether and Altcoins | Cryptocurrency Exchange | BIT
Biconomy cryptocurrency exchange - We operate the worlds biggest Bitcoin exchange and Altcoin crypto exchange in the world by volume
www.biconomy.com
October 27, 2026 at 6:10 AM
New listing on 👉Biconomy
Coin: #RLS
Pairs:
#RLSUSDT quote:#USDT
#newcoinlisting #crypto #cryptonews #cryptoAlerts #altcoins #bitcoin #btc #blockchain #cryptocurrency #cryptotrading
Coin: #RLS
Pairs:
#RLSUSDT quote:#USDT
#newcoinlisting #crypto #cryptonews #cryptoAlerts #altcoins #bitcoin #btc #blockchain #cryptocurrency #cryptotrading
At least 7 people shot, 1 fatally in Elizabeth, New Jersey, sources tell RLS Media.
October 27, 2026 at 3:58 AM
At least 7 people shot, 1 fatally in Elizabeth, New Jersey, sources tell RLS Media.
In the other gardens
And all up in the vale,
From the autumn bonfires
See the smoke trail!
Pleasant summer over,
And all the summer flowers,
The red fire blazes,
The grey smoke towers.
Sing a song of seasons!
Something bright in all!
Flowers in the summer,
Fires in the fall! -RLS
And all up in the vale,
From the autumn bonfires
See the smoke trail!
Pleasant summer over,
And all the summer flowers,
The red fire blazes,
The grey smoke towers.
Sing a song of seasons!
Something bright in all!
Flowers in the summer,
Fires in the fall! -RLS
October 27, 2026 at 2:05 AM
In the other gardens
And all up in the vale,
From the autumn bonfires
See the smoke trail!
Pleasant summer over,
And all the summer flowers,
The red fire blazes,
The grey smoke towers.
Sing a song of seasons!
Something bright in all!
Flowers in the summer,
Fires in the fall! -RLS
And all up in the vale,
From the autumn bonfires
See the smoke trail!
Pleasant summer over,
And all the summer flowers,
The red fire blazes,
The grey smoke towers.
Sing a song of seasons!
Something bright in all!
Flowers in the summer,
Fires in the fall! -RLS
SNS開発の裏側、noteで公開中。
SupabaseのRLS設計とか、AdSense審査の話とか。
個人開発者の参考になれば。
https://the111.netlify.app
#個人開発 #Supabase #NextJS
SupabaseのRLS設計とか、AdSense審査の話とか。
個人開発者の参考になれば。
https://the111.netlify.app
#個人開発 #Supabase #NextJS
October 27, 2026 at 1:19 AM
SNS開発の裏側、noteで公開中。
SupabaseのRLS設計とか、AdSense審査の話とか。
個人開発者の参考になれば。
https://the111.netlify.app
#個人開発 #Supabase #NextJS
SupabaseのRLS設計とか、AdSense審査の話とか。
個人開発者の参考になれば。
https://the111.netlify.app
#個人開発 #Supabase #NextJS
Learned this from UpGuard: Supabase enables RLS by default on tables made in the Table Editor, but not on tables created through the API, which is how coding agents usually make them. If an agent wrote your schema, click through every table in the dashboard.
October 26, 2026 at 4:00 PM
Learned this from UpGuard: Supabase enables RLS by default on tables made in the Table Editor, but not on tables created through the API, which is how coding agents usually make them. If an agent wrote your schema, click through every table in the dashboard.
Maybe it’s just a weird coincidence, but my RLS is so much worse during the week leading to the full moon, and about a week after. My legs are always calmer during a new moon.
October 26, 2026 at 1:10 PM
Maybe it’s just a weird coincidence, but my RLS is so much worse during the week leading to the full moon, and about a week after. My legs are always calmer during a new moon.