Supabase's October 30 change, sniffed out

Ember noticed something new in the Supabase yard. From October 30, new tables in the public schema need a grant before the Data API (what supabase-js uses) can reach them. Existing tables keep working, so no need to bark.

If a new table throws 42501 permission denied, that's the reason.

The one thing to do

Grant only what each role needs, and turn on Row Level Security with real policies in the same migration. A grant without RLS is like leaving the treat cupboard open.

Full steps in the guide. Then let Ember sniff your live app with a free scan at sniffpup.com.

Want one 2-minute check like this every morning? Sign up below.

Named after Ember, my black Pomeranian. Built by a software engineer and vibe-coding hobbyist to help you ship safely.