Supabase stops auto-granting new tables on Oct 30. Don't let your AI agent "fix" it by turning off RLS.Starting October 30, 2026, new tables you create in the public schema of an existing Supabase project are no longer automatically granted to the anon, authenticated and service_role roles. Existing ta1d ago · 3 min readlastmilekit.hashnode.dev
Firebase "insecure rules" email: fix your Firestore rules before launchOriginally published at Last Mile. The email reads something like: "[Firebase] Your Cloud Firestore database has insecure rules. We've detected the following issue(s) with your security rules: any use4d ago · 5 min readlastmilekit.hashnode.dev
Supabase 42501 "permission denied for table" on new tables: the Oct 30 change and the safe fixOriginally published at Last Mile. If supabase-js suddenly returns {"code": "42501", "message": "permission denied for table your_table"} for a table you just created, and the same query works in the Oct 20 · 5 min readlastmilekit.hashnode.dev
Supabase RLS checklist before launchIf your vibe-coded app talks to Supabase from the browser, Row Level Security is the difference between “users see their own data” and “anyone with the anon key reads the whole table.” The Supabase anOct 19 · 5 min readlastmilekit.hashnode.dev
Payment success-page bypass: verify payments server-sideHere's the pattern. The user clicks Buy, pays on Stripe Checkout, and Stripe redirects them to /success. The success page runs code that marks the account as paid: it sets a flag in local storage, calOct 18 · 4 min readlastmilekit.hashnode.dev
