Designing Multi‑tenant Isolation with Supabase Row Level Security
Learn how to use Supabase Auth JWTs and Postgres Row Level Security to enforce tenant‑scoped data access without scattering checks throughout your application code.
Loading…
ReadMeFeed / Community knowledge
#postgres
Real questions. Useful conversations. Find the people who know your stack.
supabaseEnabling and Using Row‑Level Security in Supabase: A Practical Guide
Learn how to enable Row‑Level Security in Supabase, write a simple “one‑row‑per‑user” policy, and avoid common pitfalls like owner bypass and unauthenticated access. Follow the step‑by‑step guide and practical checklist to secure your tables today.
Configure Row Level Security in Supabase so users see only their own rows
Step‑by‑step guide to enable RLS on a Supabase Postgres table, create a user‑owned SELECT policy, test the behavior, and roll back if needed.
Diagnosing Supabase RLS Policies That Return 403 or Empty Results
Authenticated but getting 403s or empty results from Supabase? Diagnose Row Level Security misconfigurations with pg_policies queries, JWT role checks, and targeted fixes.
Zero-downtime deploys on Scalingo with Preboot and Postgres connection budgeting
Deploying on Scalingo can cause brief 502s if containers are slow to warm up. Pairing Preboot with explicit Postgres connection budgeting avoids the spike and keeps releases smooth.
scalingoArchitecture Note: Using Heroku Review Apps for Pull‑Request Environments
How to design a minimal, trust‑bounded Review App setup that stays within dyno limits, isolates data, and cleans up automatically when a PR closes.
herokuKeep Your Database Off the Internet: Railway Private Networking in Practice
Railway services in the same project can talk over a private network using internal DNS names. Here's how to wire an app-plus-database setup, why you should disable the database's public proxy, and how to verify it all works.
railwaySupabase Row Level Security: Avoiding the Silent‑Deny Trap
Enabling RLS in Supabase can quietly block all access if policies are missing. This post walks through the canonical auth.uid() policy pattern, a verified setup example, and the performance and security trade‑offs you need before enabling it.
Choosing Between Heroku Postgres Hobby-dev and Standard-0 for a Web Application
Decide whether Heroku Postgres Hobby-dev or Standard-0 fits your app by comparing row limits, connection counts, backup features, and cost, then provision and verify the choice with CLI commands.