-
-
Notifications
You must be signed in to change notification settings - Fork 12.8k
Enable RLS by default for new tables #4991
Copy link
Copy link
Closed
Labels
enhancementNew feature or requestNew feature or requestfrontendRelated to Supabase DashboardRelated to Supabase Dashboardp1Priority 1Priority 1securityPull requests that address a security vulnerabilityPull requests that address a security vulnerability
Description
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requestfrontendRelated to Supabase DashboardRelated to Supabase Dashboardp1Priority 1Priority 1securityPull requests that address a security vulnerabilityPull requests that address a security vulnerability
Type
Fields
Give feedbackNo fields configured for issues without a type.
For tables created from the dashboard, RLS is disabled by default.
Enabling it by default will improve security. We need to balance this with users forgetting to add a RLS policy and not getting any data back from the API. A good compromise would be to have an easy way to create a select policy for anon users when creating the table.