Commit Graph
25 Commits
Author SHA1 Message Date
Chris ChinchillaandCopilot 0e736457c8 docs: update docs to reflect new permission models for data api (#45288)
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md)
file.

YES

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Documentation**
* Instructed granting least-privilege table permissions for anon,
authenticated, and service roles prior to enabling Row Level Security
across multiple guides and quickstarts.
* Clarified SQL examples and inline comments, added explicit GRANT steps
and RLS SELECT policies, rephrased policy guidance, and adjusted example
ordering and section numbering for clearer setup and testing.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-04-29 06:54:49 +00:00
Chris Chinchillaandfadymak 1644030dcd docs: RLS and wrapper Key changes (#45166)
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md)
file.

YES

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Documentation**
* Updated SDK initialization examples to reflect current authentication
patterns across multiple Supabase integration guides
* Enhanced security documentation with expanded guidance on protecting
sensitive credentials like secrets and service role keys in frontend and
Edge Function environments
* Clarified Row-Level Security access patterns and data availability
considerations when using publishable keys

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: fadymak <dev@fadymak.com>
2026-04-24 14:01:44 +00:00
Inian 84ccde68c2 Add auto-enable RLS example to rls docs instead (#42493)
Summary
- move the auto-enable RLS trigger SQL example from the event trigger
guide into the row-level-security guide with a full example
- keep a reference in the event trigger guide that points to the
row-level-security section instead of duplicating the SQL snippet

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Documentation**
* Reorganized PostgreSQL Row Level Security documentation with a new
dedicated guide section on automatically enabling RLS for newly created
tables
* Note: Auto-enable RLS applies only to tables created after
installation; existing tables require manual enabling

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-02-06 10:25:03 +07:00
neinja.dev 1f9b9504a7 docs: Remove the resource that links to the page the user is already on. (#41697)
Removed duplicate link to Row Level Security and Supabase Auth.
2026-01-12 16:03:44 +07:00
e6548079ed 📚 Docs: Clarify that auth.uid() returns null when unauthenticated in RLS policies (#37336)
* 📚 Fix: Clarify behavior of auth.uid() when unauthenticated in RLS

* Update row-level-security.mdx

* Update row-level-security.mdx

* Update row-level-security.mdx

* Update apps/docs/content/guides/database/postgres/row-level-security.mdx

* Update apps/docs/content/guides/database/postgres/row-level-security.mdx

* Update apps/docs/content/guides/database/postgres/row-level-security.mdx

* Update apps/docs/content/guides/database/postgres/row-level-security.mdx

* Update warning about `auth.uid()` behavior

Clarified behavior of `auth.uid()` when unauthenticated and recommended explicit authentication checks.

* Change admonition type from warning to caution

* Update SQL condition for row-level security

Clarify row-level security SQL condition for unauthenticated users.

---------

Co-authored-by: Chris Chinchilla <chris@chrischinchilla.com>
Co-authored-by: Chris Chinchilla <chris.ward@supabase.io>
2025-10-09 08:32:14 +02:00
CharisandChris Chinchilla 47705a8968 chore: replace all supabase urls with relative urls (#38537)
* fix: rewrite relative URLs when syncing to GitHub discussion

Relative URLs back to supabse.com won't work in GitHub discussions, so
rewrite them back to absolute URLs starting with https://supabase.com

* fix: replace all supabase urls with relative urls

* chore: add linting for relative urls

* chore: bump linter version

* Prettier

---------

Co-authored-by: Chris Chinchilla <chris.ward@supabase.io>
2025-09-09 12:54:33 +00:00
GaryAustin1 f9e5e25a64 Fix security definer RLS example (#37800)
Seems like at some point surrounding the security definer function private.has_good_role() with a select (like all functions should have for RLS) was changed.   I can't find the PR doing it though.
2025-08-12 14:29:39 -04:00
TheOtherBrian1 a38da5620f Update row-level-security.mdx | correct example (#37361) 2025-07-31 23:19:00 -04:00
Sabu Siyad d30478cc22 doc: postgres/row-level-security: wrong link to auth (#33900) 2025-02-27 22:00:58 +00:00
Charis a820c56ed0 chore: docs linting (#33574) 2025-02-21 14:13:00 -05:00
Charis 16eddf08d6 make rls admonition more prominent with stronger language (#33620) 2025-02-14 10:54:39 -05:00
Charis 2d55512553 chore: activate spelling and admonitions lints for docs (#33292) 2025-02-04 13:18:31 -05:00
1c1b4c815d Add caution on Update Policy section for need to create Select Policy (#28678)
* Add caution on Update Policy section for need to create Select Policy

* Update apps/docs/content/guides/database/postgres/row-level-security.mdx

---------

Co-authored-by: bulut yerli <bulut@buluts-Mac-mini.local>
Co-authored-by: Charis <26616127+charislam@users.noreply.github.com>
2024-09-18 13:49:08 +00:00
0ac056dd5d Add resource links to RLS docs pages (#22465)
* add resource links to both RLS pages

* Merge master resolve conflicts

* Update apps/docs/content/guides/database/postgres/row-level-security.mdx

Co-authored-by: Charis <26616127+charislam@users.noreply.github.com>

---------

Co-authored-by: Joshen Lim <joshenlimek@gmail.com>
Co-authored-by: Charis <26616127+charislam@users.noreply.github.com>
2024-08-16 10:25:17 +07:00
4574951962 docs: warn about user_metadata used in RLS (#21561)
* docs: warn about `user_metadata` used in RLS

Adds a warning to the Row Level Security page that using `user_metadata` can be insecure.

* Update apps/docs/content/guides/auth/row-level-security.mdx

Co-authored-by: Charis <26616127+charislam@users.noreply.github.com>

---------

Co-authored-by: Joshen Lim <joshenlimek@gmail.com>
Co-authored-by: Charis <26616127+charislam@users.noreply.github.com>
2024-08-15 16:53:13 +08:00
mio256 8f616dfee3 docs: row-level-security.mdx, syntax error in create table user_id field (#28055)
Update row-level-security.mdx

syntax in create table user_id field
2024-07-19 20:12:27 +00:00
GaryAustin1 85de650034 Invalid SQL syntax in rls bypass section (#27738)
Unless there is some new SQL I'm not familiar the code shown:
`grant bypassrls on "table_name" to "role_name";`
Will not work and instead should be:
`alter role "role_name" with bypassrls;`
2024-07-01 17:54:54 -04:00
hallidayoandCharis e606e1e5ca docs: metadata changes (#26626)
metadata changes

Co-authored-by: Charis <26616127+charislam@users.noreply.github.com>
2024-05-21 23:29:06 +00:00
raaedandCharis 29d96774fd Update row-level-security.mdx (#26155)
Fix typo: add missing "to"

Co-authored-by: Charis <26616127+charislam@users.noreply.github.com>
2024-05-13 18:58:30 +00:00
ec86bbc4fe feat: new auth ia (#22812)
Co-authored-by: Kang Ming <kang.ming1996@gmail.com>
Co-authored-by: Joel Lee <lee.yi.jie.joel@gmail.com>
2024-05-07 20:15:06 +00:00
Kevin Grüneberg e6bbe8e4d5 fix: rls example (#22853) 2024-04-18 09:35:25 +02:00
GaryAustin1 ed6205ea2a Update row-level-security.mdx to fix aggressive bad SQL cleanup (#22746)
The cleanup last done to show better RLS SQL changed the bad example and is causing user confusion now that it is highlighted by the linter.
2024-04-15 12:23:43 -04:00
Charis 5d8cef6040 fix: update all examples and snippets to use select for auth rls func… (#22632)
fix: update all examples and snippets to use select for auth rls functions
2024-04-11 12:56:11 -04:00
Charis cb7c67864b chore: linting rule tweaks and error fixes (#21678) 2024-03-04 23:32:46 -05:00
Charis b0b8b6b6e3 refactor: finish moving mdx to content directory (#21321) 2024-02-16 13:43:02 -05:00