Heads-up: Supabase breaking API change — Breaking Change: supabase-flutter v3 brings type safety to the whole API surface. If Supabase is in your production stack, this is worth checking before it becomes a fire drill.
November 6, 2026 at 4:30 PM
Heads-up: Supabase breaking API change — Breaking Change: supabase-flutter v3 brings type safety to the whole API surface. If Supabase is in your production stack, this is worth checking before it becomes a fire drill.
Common Supabase slip: RLS is on, but the policy only checks that someone is signed in.
That still lets user A read user B's rows. Owner column has to match auth.uid().
#Supabase #SaaS #buildinpublic #AI #Lovable #AppSec #vibecoding #webdev
That still lets user A read user B's rows. Owner column has to match auth.uid().
#Supabase #SaaS #buildinpublic #AI #Lovable #AppSec #vibecoding #webdev
November 7, 2026 at 6:35 AM
Common Supabase slip: RLS is on, but the policy only checks that someone is signed in.
That still lets user A read user B's rows. Owner column has to match auth.uid().
#Supabase #SaaS #buildinpublic #AI #Lovable #AppSec #vibecoding #webdev
That still lets user A read user B's rows. Owner column has to match auth.uid().
#Supabase #SaaS #buildinpublic #AI #Lovable #AppSec #vibecoding #webdev
Postgres plus auth, storage, realtime, edge functions and instant APIs, all open source. 🔗 github.com/supabase/supabase
Credits: github.com/supabase/supabase
#supabase #typescript #postgres
Credits: github.com/supabase/supabase
#supabase #typescript #postgres
November 4, 2026 at 2:00 AM
Postgres plus auth, storage, realtime, edge functions and instant APIs, all open source. 🔗 github.com/supabase/supabase
Credits: github.com/supabase/supabase
#supabase #typescript #postgres
Credits: github.com/supabase/supabase
#supabase #typescript #postgres
Curious how people building on Supabase test RLS before launch.
Sign in as a second user and go after the first one's rows? pgTAP? A script in CI? Or is it on the list for after launch?
#Supabase #buildinpublic #SaaS #AI #vibecoding #webdev #Lovable #Postgres
Sign in as a second user and go after the first one's rows? pgTAP? A script in CI? Or is it on the list for after launch?
#Supabase #buildinpublic #SaaS #AI #vibecoding #webdev #Lovable #Postgres
November 6, 2026 at 10:35 AM
Curious how people building on Supabase test RLS before launch.
Sign in as a second user and go after the first one's rows? pgTAP? A script in CI? Or is it on the list for after launch?
#Supabase #buildinpublic #SaaS #AI #vibecoding #webdev #Lovable #Postgres
Sign in as a second user and go after the first one's rows? pgTAP? A script in CI? Or is it on the list for after launch?
#Supabase #buildinpublic #SaaS #AI #vibecoding #webdev #Lovable #Postgres
Honest question for people on Supabase: first RLS policy on a new table, do you write it owner-only, or open to every signed-in user and lock it down later?
#Supabase #buildinpublic #SaaS #AI #Lovable #AppSec #vibecoding #webdev
#Supabase #buildinpublic #SaaS #AI #Lovable #AppSec #vibecoding #webdev
November 7, 2026 at 10:35 AM
Honest question for people on Supabase: first RLS policy on a new table, do you write it owner-only, or open to every signed-in user and lock it down later?
#Supabase #buildinpublic #SaaS #AI #Lovable #AppSec #vibecoding #webdev
#Supabase #buildinpublic #SaaS #AI #Lovable #AppSec #vibecoding #webdev
New Supabase table? RLS starts off. Anon key can read it until you enable RLS + owner policies. Check Table Editor / Security Advisor.
abbilabs.xyz/tips/new-tab...
#Supabase #RLS #vibecoding #AppSec #webdev #buildinpublic #PostgreSQL #SaaS #Cursor #Lovable #devtools
abbilabs.xyz/tips/new-tab...
#Supabase #RLS #vibecoding #AppSec #webdev #buildinpublic #PostgreSQL #SaaS #Cursor #Lovable #devtools
Abbi Labs — security monitoring for AI-built apps
Abbi Labs scans your Lovable, Bolt, v0, Cursor or Replit app from the outside for leaked keys, open Supabase tables and exposed files, weekly and on every deploy.
abbilabs.xyz
November 6, 2026 at 9:05 PM
New Supabase table? RLS starts off. Anon key can read it until you enable RLS + owner policies. Check Table Editor / Security Advisor.
abbilabs.xyz/tips/new-tab...
#Supabase #RLS #vibecoding #AppSec #webdev #buildinpublic #PostgreSQL #SaaS #Cursor #Lovable #devtools
abbilabs.xyz/tips/new-tab...
#Supabase #RLS #vibecoding #AppSec #webdev #buildinpublic #PostgreSQL #SaaS #Cursor #Lovable #devtools
Supabase is looking for a Product Manager - Administration & Governance in Remote
https://weloveproduct.co/jobs/product-manager-administration-and-governance-supabase-lfnztg
#productmanager #productjobs #jobs #jobsoffer #weloveproduct #remotejobs
https://weloveproduct.co/jobs/product-manager-administration-and-governance-supabase-lfnztg
#productmanager #productjobs #jobs #jobsoffer #weloveproduct #remotejobs
Supabase is looking for a Product Manager - Administration & Governance in Remote
You can expect a salary of $160,000 - $205,000
weloveproduct.co
November 7, 2026 at 4:42 AM
Supabase is looking for a Product Manager - Administration & Governance in Remote
https://weloveproduct.co/jobs/product-manager-administration-and-governance-supabase-lfnztg
#productmanager #productjobs #jobs #jobsoffer #weloveproduct #remotejobs
https://weloveproduct.co/jobs/product-manager-administration-and-governance-supabase-lfnztg
#productmanager #productjobs #jobs #jobsoffer #weloveproduct #remotejobs
Honest question for vibe coders:
Has your AI tool ever "fixed" a Supabase permission error by turning RLS off, adding using (true), or switching to the service_role key?
Did you catch it right away, or months later?
#vibecoding #Supabase #buildinpublic #AI #SaaS #Lovable #Cursor #Bolt #nocode
Has your AI tool ever "fixed" a Supabase permission error by turning RLS off, adding using (true), or switching to the service_role key?
Did you catch it right away, or months later?
#vibecoding #Supabase #buildinpublic #AI #SaaS #Lovable #Cursor #Bolt #nocode
November 5, 2026 at 10:35 AM
Honest question for vibe coders:
Has your AI tool ever "fixed" a Supabase permission error by turning RLS off, adding using (true), or switching to the service_role key?
Did you catch it right away, or months later?
#vibecoding #Supabase #buildinpublic #AI #SaaS #Lovable #Cursor #Bolt #nocode
Has your AI tool ever "fixed" a Supabase permission error by turning RLS off, adding using (true), or switching to the service_role key?
Did you catch it right away, or months later?
#vibecoding #Supabase #buildinpublic #AI #SaaS #Lovable #Cursor #Bolt #nocode
Supabase throwing "new row violates row-level security policy" on insert?
Usually it's a missing INSERT policy, user_id not matching auth.uid(), or .select() needing a SELECT policy too. The bad fix is with check (true).
Guide linked 👇
#Supabase #buildinpublic #SaaS #AI #Lovable
Usually it's a missing INSERT policy, user_id not matching auth.uid(), or .select() needing a SELECT policy too. The bad fix is with check (true).
Guide linked 👇
#Supabase #buildinpublic #SaaS #AI #Lovable
Supabase "new row violates row-level security policy": fix it without opening your table
The usual causes, a SQL test as the real user, and why with check (true) is the wrong fix.
abbilabs.xyz
November 6, 2026 at 6:35 AM
Supabase throwing "new row violates row-level security policy" on insert?
Usually it's a missing INSERT policy, user_id not matching auth.uid(), or .select() needing a SELECT policy too. The bad fix is with check (true).
Guide linked 👇
#Supabase #buildinpublic #SaaS #AI #Lovable
Usually it's a missing INSERT policy, user_id not matching auth.uid(), or .select() needing a SELECT policy too. The bad fix is with check (true).
Guide linked 👇
#Supabase #buildinpublic #SaaS #AI #Lovable
✅ Supabase: minor issue resolved after 2 h 28 m.
Our probes: supabase.com reachable from all 8 regions
Details ↗
Our probes: supabase.com reachable from all 8 regions
Details ↗
Supabase status
Live status for Supabase, checked from regions around the world.
flarewarden.com
November 7, 2026 at 2:20 AM
✅ Supabase: minor issue resolved after 2 h 28 m.
Our probes: supabase.com reachable from all 8 regions
Details ↗
Our probes: supabase.com reachable from all 8 regions
Details ↗
🟡 Supabase: Intermittent 502/503 errors for pg_net calls to Edge Functions
Supabase reports intermittent 502 and 503 errors that affect pgnet calls to Edge Functions in ap-southeast-1. Supabase is investigating the incident.
Degraded
https://outages.live/outages/supabase-n39m69shqq
Supabase reports intermittent 502 and 503 errors that affect pgnet calls to Edge Functions in ap-southeast-1. Supabase is investigating the incident.
Degraded
https://outages.live/outages/supabase-n39m69shqq
Supabase: Intermittent 502/503 errors for pg_net calls to Edge Functions
Supabase reports intermittent 502 and 503 errors that affect pgnet calls to Edge Functions in ap-southeast-1. Supabase is investigating the incident.
outages.live
November 5, 2026 at 11:15 PM
🟡 Supabase: Intermittent 502/503 errors for pg_net calls to Edge Functions
Supabase reports intermittent 502 and 503 errors that affect pgnet calls to Edge Functions in ap-southeast-1. Supabase is investigating the incident.
Degraded
https://outages.live/outages/supabase-n39m69shqq
Supabase reports intermittent 502 and 503 errors that affect pgnet calls to Edge Functions in ap-southeast-1. Supabase is investigating the incident.
Degraded
https://outages.live/outages/supabase-n39m69shqq
lmao claude called my self-hosted supabase FAKE. well i NEVER!!!
November 6, 2026 at 12:13 PM
lmao claude called my self-hosted supabase FAKE. well i NEVER!!!
🟡 Supabase: Increased Errors with Project Lifecycle Operations in US-West-2
Minor issue · Databases · since 23:49 UTC
Cause identified, fix in progress
Our probes: supabase.com reachable from all 8 regions
Details ↗ · #Supabase
Minor issue · Databases · since 23:49 UTC
Cause identified, fix in progress
Our probes: supabase.com reachable from all 8 regions
Details ↗ · #Supabase
Supabase status: minor issue
Live status for Supabase, checked from regions around the world.
flarewarden.com
November 6, 2026 at 11:53 PM
✅ Supabase: minor issue resolved after 42 m.
Our probes: supabase.com reachable from all 8 regions
Details ↗
Our probes: supabase.com reachable from all 8 regions
Details ↗
Supabase status
Live status for Supabase, checked from regions around the world.
flarewarden.com
November 6, 2026 at 12:00 AM
✅ Supabase: minor issue resolved after 42 m.
Our probes: supabase.com reachable from all 8 regions
Details ↗
Our probes: supabase.com reachable from all 8 regions
Details ↗
November 6, 2026 at 1:55 PM
Supabase detail: the Security Advisor's "RLS Policy Always True" warning skips SELECT policies, since public reads are often deliberate.
So a using (true) on a table that should be private can sit behind a clean advisor. List your SELECT policies by hand.
#Supabase #buildinpublic #SaaS #AppSec
So a using (true) on a table that should be private can sit behind a clean advisor. List your SELECT policies by hand.
#Supabase #buildinpublic #SaaS #AppSec
November 6, 2026 at 12:50 PM
Supabase detail: the Security Advisor's "RLS Policy Always True" warning skips SELECT policies, since public reads are often deliberate.
So a using (true) on a table that should be private can sit behind a clean advisor. List your SELECT policies by hand.
#Supabase #buildinpublic #SaaS #AppSec
So a using (true) on a table that should be private can sit behind a clean advisor. List your SELECT policies by hand.
#Supabase #buildinpublic #SaaS #AppSec
Heads-up: Supabase breaking API change — Breaking Change: supabase-flutter v3 brings type safety to the whole API surface. If Supabase is in your production stack, this is worth checking before it becomes a fire drill.
November 6, 2026 at 4:41 PM
Heads-up: Supabase breaking API change — Breaking Change: supabase-flutter v3 brings type safety to the whole API surface. If Supabase is in your production stack, this is worth checking before it becomes a fire drill.
Supabase, the 112th Opinion: maybeSingle() Said No, and the Rows Were Already Gone
A research-only check-in on Supabase: a supabase-js report shows maybeSingle() returning an error on deletes that al…
https://theagentpost.co/posts/review-supabase-maybe-single-said-no-and-the-rows-were-already-gone
A research-only check-in on Supabase: a supabase-js report shows maybeSingle() returning an error on deletes that al…
https://theagentpost.co/posts/review-supabase-maybe-single-said-no-and-the-rows-were-already-gone
Supabase, the 112th Opinion: maybeSingle() Said No, and the Rows Were Already Gone
A research-only check-in on Supabase: a supabase-js report shows maybeSingle() returning an error on deletes that already committed, a one-day CLI fix sits behind a release PR now five days old, and the score drops as promised.
theagentpost.co
November 7, 2026 at 1:31 PM
Supabase, the 112th Opinion: maybeSingle() Said No, and the Rows Were Already Gone
A research-only check-in on Supabase: a supabase-js report shows maybeSingle() returning an error on deletes that al…
https://theagentpost.co/posts/review-supabase-maybe-single-said-no-and-the-rows-were-already-gone
A research-only check-in on Supabase: a supabase-js report shows maybeSingle() returning an error on deletes that al…
https://theagentpost.co/posts/review-supabase-maybe-single-said-no-and-the-rows-were-already-gone
Supabase RLS gotcha: an UPDATE policy that checks the owner in USING but has with check (true).
USING decides which rows you can edit. WITH CHECK decides what the edited row may look like. With true, a user can hand their row to another user_id.
#Supabase #buildinpublic #SaaS #AI #webdev
USING decides which rows you can edit. WITH CHECK decides what the edited row may look like. With true, a user can hand their row to another user_id.
#Supabase #buildinpublic #SaaS #AI #webdev
November 6, 2026 at 8:35 PM
Supabase RLS gotcha: an UPDATE policy that checks the owner in USING but has with check (true).
USING decides which rows you can edit. WITH CHECK decides what the edited row may look like. With true, a user can hand their row to another user_id.
#Supabase #buildinpublic #SaaS #AI #webdev
USING decides which rows you can edit. WITH CHECK decides what the edited row may look like. With true, a user can hand their row to another user_id.
#Supabase #buildinpublic #SaaS #AI #webdev
🟡 Supabase: Intermittent 502/503 errors for pg_net calls to Edge Functions
Minor issue · Databases · since 23:12 UTC
Our probes: supabase.com reachable from all 8 regions
Details ↗ · #Supabase
Minor issue · Databases · since 23:12 UTC
Our probes: supabase.com reachable from all 8 regions
Details ↗ · #Supabase
Supabase status: minor issue
Live status for Supabase, checked from regions around the world.
flarewarden.com
November 5, 2026 at 11:17 PM
⚡ Remote FinOps Engineer at Supabase.
✅ Apply here: https://jobicy.com/jobs/159370-finops-engineer
#RemoteJobs #CloudEngineering #CloudJobs #PlatformEngineering #Infrastructure
✅ Apply here: https://jobicy.com/jobs/159370-finops-engineer
#RemoteJobs #CloudEngineering #CloudJobs #PlatformEngineering #Infrastructure
Remote FinOps Engineer at Supabase - Jobicy
About Supabase Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions,...
jobicy.com
November 6, 2026 at 4:18 PM
⚡ Remote FinOps Engineer at Supabase.
✅ Apply here: https://jobicy.com/jobs/159370-finops-engineer
#RemoteJobs #CloudEngineering #CloudJobs #PlatformEngineering #Infrastructure
✅ Apply here: https://jobicy.com/jobs/159370-finops-engineer
#RemoteJobs #CloudEngineering #CloudJobs #PlatformEngineering #Infrastructure
Before an AI-built app on Supabase takes real users: restore a backup on a project that isn't live, pick the region on purpose (moving means a new project, URL and keys), and switch on row-level security across every table in an exposed schema.
#Supabase #Startups #AppSecurity #Postgres
#Supabase #Startups #AppSecurity #Postgres
November 6, 2026 at 2:00 PM
Before an AI-built app on Supabase takes real users: restore a backup on a project that isn't live, pick the region on purpose (moving means a new project, URL and keys), and switch on row-level security across every table in an exposed schema.
#Supabase #Startups #AppSecurity #Postgres
#Supabase #Startups #AppSecurity #Postgres
⚡ Remote OrioleDB Deployment Engineer at Supabase.
✅ Apply here: https://jobicy.com/jobs/159380-orioledb-deployment-engineer
#RemoteJobs #DevOpsJobs #DevOps #CloudJobs #PlatformEngineering
✅ Apply here: https://jobicy.com/jobs/159380-orioledb-deployment-engineer
#RemoteJobs #DevOpsJobs #DevOps #CloudJobs #PlatformEngineering
Remote OrioleDB Deployment Engineer at Supabase - Jobicy
About Supabase Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions,...
jobicy.com
November 6, 2026 at 4:18 PM
⚡ Remote OrioleDB Deployment Engineer at Supabase.
✅ Apply here: https://jobicy.com/jobs/159380-orioledb-deployment-engineer
#RemoteJobs #DevOpsJobs #DevOps #CloudJobs #PlatformEngineering
✅ Apply here: https://jobicy.com/jobs/159380-orioledb-deployment-engineer
#RemoteJobs #DevOpsJobs #DevOps #CloudJobs #PlatformEngineering
Quick Supabase check: open Storage and see which buckets are marked Public.
Public means any file is downloadable by anyone who has the URL. RLS doesn't come into it.
Fine for logos. Not fine for receipts, IDs or anything a user uploaded privately.
#Supabase #buildinpublic #webdev #AppSec
Public means any file is downloadable by anyone who has the URL. RLS doesn't come into it.
Fine for logos. Not fine for receipts, IDs or anything a user uploaded privately.
#Supabase #buildinpublic #webdev #AppSec
November 7, 2026 at 1:35 AM
Quick Supabase check: open Storage and see which buckets are marked Public.
Public means any file is downloadable by anyone who has the URL. RLS doesn't come into it.
Fine for logos. Not fine for receipts, IDs or anything a user uploaded privately.
#Supabase #buildinpublic #webdev #AppSec
Public means any file is downloadable by anyone who has the URL. RLS doesn't come into it.
Fine for logos. Not fine for receipts, IDs or anything a user uploaded privately.
#Supabase #buildinpublic #webdev #AppSec
November 6, 2026 at 1:30 AM