chiprook
← Software
SoftwareOctober 28, 2026, 18:04

Supabase requires explicit GRANTs for new tables from 30 October

Starting 30 October 2026, Supabase stops automatically granting anon, authenticated and service_role access to new tables in the public schema, so tables without an explicit GRANT become unreachable through the Data API. Existing tables keep their current grants, and RLS and other services are unchanged.

Supabase requires explicit GRANTs for new tables from 30 October
#Supabase#Lovable#Bolt
Read next
Software

Supabase: public tables no longer auto-exposed to Data API from 30 October

Security

vibeaudit: 11 static checks for security holes in AI-built apps

Security

18.8% of public Supabase repos left a table readable by the anon key

Security

Scan of 978 vibe-coded apps finds 1 in 26 leaks a secret API key