Supabase requires explicit GRANTs for new tables from 30 October
Starting 30 October 2026, Supabase stops automatically granting anon, authenticated and service_role access to new tables in the public schema, so tables without an explicit GRANT become unreachable through the Data API. Existing tables keep their current grants, and RLS and other services are unchanged.
- New public tables no longer get automatic select, insert, update and delete grants
- Existing tables keep their current grants and stay reachable via the Data API
- The failure shows up as error 42501 "permission denied for table" on /rest/v1/ requests
- GRANTs and RLS must be added in the same migration as the table
Read next
Software