Advanced Row Level Security (RLS) Policies // Authorization Deep Dive

[@chips4real1]

Please do a video on including additional data from the public schema in the session

[@JonMeyers]

That’s a good one! Will add it to the list! 💯

[@sergeyagronov9650]

superb videos, content and delivery, hope supabase will continue to rock!!!

[@JonMeyers]

It definitely will! Glad you enjoyed the video! 🙌

[@caseyspaulding]

Great! Love the content ! Thanks

[@JonMeyers]

Thanks! Glad you enjoyed it! 🙌

[@JonMeyers]

Thanks! Glad you enjoyed it! 🙌

[@sconsalter]

I created schemas to organize my tables in Supabase, but I am unable to load them in FlutterFlow. On the schema screen in FlutterFlow, only the tables in the 'public' schema appear. What configuration should I make in Supabase so that these schemas I created appear in the API?

[@JonMeyers]

@dshukertjr any ideas?

[@Hagemony]

Supabase getting overcomplicated..... Let me give surrealDB a shot

[@BenjaminMichotte]

It’s not Supabase being complicated, it’s Postgres being powerful 😂

[@JonMeyers]

@@BenjaminMichottenailed it!

[@innovatorshome]

Yes​@@BenjaminMichotte

[@wiesson1546]

Is there a good naming pattern for the policies? I have like 70+ tables and Somehow I write "users can read" "users can select", "users can see" … I ended up to copy select / update / ... so that is it at least a bit unified

[@JonMeyers]

Yeah, can get a little out of hand! I would recommend using the name to describe the policy to make it easier to parse later - “authenticated users can select their own todos” rather than “select todos policy”

[@samds7750]

Can you do a video showing RBAC in Supabase with a permissions table for multiple roles where RLS policies grab the current user's role from a JWT, for instance Clerk's supabase JWT with the role embedded in public metadata?

[@jonathangamble]

you should be using select with auth.uid()... need a video on policies and speed

[@JonMeyers]

Yep, good call! This would be more efficient!

[@TorstenFischer-gj4cs]

When I have a 1:1 relationship between an user and its DB objects: Is it suitable to use "ALL" RLS with "(auth.jwt() ->> 'sub'::text) = (user_id)::text"?

[@OlivierMARTINEAU]

Strange, I don't have the "definition" button on the view in the table editor section. Have you the same issue ?

[@JonMeyers]

Oh weird! I thought this was rolled out to all projects. If you submit a support ticket to supabase.com/support someone can take a look 👍