Supabase stops auto-granting privileges on new tables from October 30

Starting October 30, 2026, existing Supabase projects no longer auto-grant privileges on new tables in the public schema. Data API requests fail with Postgres error 42501 even with RLS and policies in place, so grants must be added explicitly in the same migration as the table.

• Existing tables keep their grants; new tables without explicit GRANT are invisible to the Data API
• Error 42501 fires before RLS is checked, so policies alone do not help
• Direct Postgres connections are unaffected; the change covers REST, GraphQL and client libraries
• Supabase advises least-privilege grants for authenticated and service_role instead of GRANT ALL