search

supabase / splinter

Supabase Postgres Linter
https://supabase.github.io/splinter/
70 stars 6 forks source link

Feature: Public table, RLS not enabled #29

Closed kiwicopple closed 3 months ago

kiwicopple commented 3 months ago

Every table in the public schema (or a schema which is exposed to PostgREST) should have RLS enabled. IMO this would be a CRITICAL bug

It's slightly at odds with this one: https://supabase.github.io/splinter/0008_rls_enabled_no_policy/

But this one should take precedence so that users don't leak private data with the anon key