From 79ebe4dcf5688ede49fbc8d725d1f32ac19cc25d Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Tue, 17 Feb 2026 04:47:51 +0000
Subject: [PATCH] Add Data API privileges guidance to Getting Started workflows

Update the RLS policies step in both code and no-code workflows to
mention Data API privileges. Tables need appropriate grants for the
anon and authenticated roles to be accessible via the Data API and
client libraries. Adds a "Manage API privileges" action linking to
the hardening docs (code workflow) and the Data API settings page
(no-code workflow).

https://claude.ai/code/session_01DP6wmuPTzzcoW6VZ8RyLXo
---
 .../GettingStarted/GettingStarted.utils.tsx    | 18 ++++++++++++++----
 1 file changed, 14 insertions(+), 4 deletions(-)

diff --git a/apps/studio/components/interfaces/HomeNew/GettingStarted/GettingStarted.utils.tsx b/apps/studio/components/interfaces/HomeNew/GettingStarted/GettingStarted.utils.tsx
index 113d1d54630..07326bbe504 100644
--- a/apps/studio/components/interfaces/HomeNew/GettingStarted/GettingStarted.utils.tsx
+++ b/apps/studio/components/interfaces/HomeNew/GettingStarted/GettingStarted.utils.tsx
@@ -107,16 +107,21 @@ export const getCodeWorkflowSteps = ({
     {
       key: 'add-rls-policies',
       status: hasRlsPolicies ? 'complete' : 'incomplete',
-      title: 'Secure your data with RLS policies',
+      title: 'Define who can access your data',
       icon: <Shield strokeWidth={1} className="text-foreground-muted" size={16} />,
       description:
-        "Let's secure your data by enabling Row Level Security (per-row access rules that decide who can read or write specific records) and defining policies in a migration file, either configuring them manually or letting the AI assistant draft policies for your tables.",
+        "Secure your data by enabling Row Level Security (per-row access rules that decide who can read or write specific records) and defining policies in a migration file. You'll also want to ensure your tables have the right Data API privileges granted to the anon and authenticated roles—without these grants, tables won't be accessible via the Data API or client libraries.",
       actions: [
         {
           label: 'Create a migration file',
           href: `/project/${ref}/auth/policies`,
           variant: 'default',
         },
+        {
+          label: 'Manage API privileges',
+          href: `${DOCS_URL}/guides/database/hardening-data-api#adjusting-table-level-privileges`,
+          variant: 'default',
+        },
         {
           label: 'Create policies for me',
           variant: 'default',
@@ -280,16 +285,21 @@ export const getNoCodeWorkflowSteps = ({
     {
       key: 'add-rls-policies',
       status: hasRlsPolicies ? 'complete' : 'incomplete',
-      title: 'Secure your data with Row Level Security',
+      title: 'Define who can access your data',
       icon: <Shield strokeWidth={1} className="text-foreground-muted" size={16} />,
       description:
-        "Now that you have some data, let's secure it by enabling Row Level Security (row-specific access rules that control who can view or modify records) and creating policies yourself or with help from the AI assistant.",
+        "Now that you have some data, secure it by enabling Row Level Security (row-specific access rules that control who can view or modify records) and creating policies. You should also check that your tables have the appropriate Data API privileges—these control whether the anon and authenticated roles can access your tables via the Data API and client libraries.",
       actions: [
         {
           label: 'Create a policy',
           href: `/project/${ref}/auth/policies`,
           variant: 'default',
         },
+        {
+          label: 'Manage API privileges',
+          href: `/project/${ref}/integrations/data_api/settings`,
+          variant: 'default',
+        },
         {
           label: 'Do it for me',
           variant: 'default',