Supabase stops auto-granting new tables on Oct 30

Starting October 30, 2026, Supabase will no longer auto-grant anon, authenticated and service_role access to new tables in public on existing projects. Tables created without an explicit GRANT will return 42501 through the Data API, so developers must add GRANTs and RLS to their migrations.

• From Oct 30, new tables without GRANT return 42501 via the Data API
• Existing tables keep their current grants and stay reachable
• The common GRANT ALL fix re-opens the hole for anyone with the anon key
• Before Oct 30, revoke first then grant: GRANT only adds privileges