Supabase stops auto-granting privileges on new public tables from Oct 30

Starting October 30, 2026, Supabase will no longer auto-grant privileges on new tables in the public schema. Without an explicit GRANT, Data API requests via supabase-js, REST or GraphQL will fail with Postgres error 42501, and RLS won't help because grants are checked first.

• Only new public tables are affected; existing tables keep their grants
• Without a GRANT, the Data API returns error 42501 permission denied
• RLS doesn't help: Postgres checks grants before policies
• Direct Postgres connections and the auth and storage schemas are unaffected