Skip to content

docs: update documentation for postgres and self-hosted supabase auth/rls#43

Open
damlayildiz wants to merge 4 commits intomainfrom
docs/postgres-supabase-doc-updates
Open

docs: update documentation for postgres and self-hosted supabase auth/rls#43
damlayildiz wants to merge 4 commits intomainfrom
docs/postgres-supabase-doc-updates

Conversation

@damlayildiz
Copy link
Copy Markdown
Member

…entication/rls

@damlayildiz damlayildiz requested a review from andinux April 20, 2026 15:52
@damlayildiz damlayildiz self-assigned this Apr 20, 2026
damlayildiz and others added 3 commits April 20, 2026 17:54
Previous guidance in jwt-claims.md listed an incomplete minimum set
(schema + cloudsync_changes + user table + sequence). Missing grants
on internal objects — shadow tables, cloudsync_settings,
cloudsync_site_id, cloudsync_table_settings, cloudsync_schema_versions,
app_schema_version, and the cloudsync_site_id_id_seq sequence — cause
the per-PK savepoint to silently roll back writes while
cloudsync_payload_apply still returns a non-zero column-change count,
so callers see success while rows never land.

jwt-claims.md: expand "PostgreSQL Role Requirement" with role creation
(NOLOGIN + GRANT), a recommended default-privileges pattern,
an explicit minimum allowlist for audited deployments, and a
BYPASSRLS service-role recipe.

rls.md: add a matching troubleshooting entry for the silent-skip
failure mode, linking back to the grants reference.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants