supabase db push fails with "must be owner of relation messages" (SQLSTATE 42501)

[RMACTION]

Affected area

Migrations

Supabase CLI version

2.109.1

Operating system

macOS Sequoia (Apple Silicon)

Installation method

brew

Command

supabase db push

Actual output

Applying migration ...

ERROR: must be owner of relation messages
SQLSTATE: 42501

The migration aborts and no policy is created.

The exact same SQL succeeds when executed manually from the Supabase SQL Editor as the `postgres` role.

Expected behavior

The migration should execute successfully and create the RLS policy on realtime.messages, since the same SQL executes successfully from the Supabase SQL Editor as the postgres role and this workflow is documented for Realtime Authorization.

Steps to reproduce

1. Create a Supabase Cloud project.
2. Configure Realtime Authorization following the official documentation.
3. Add a migration containing:

CREATE POLICY authorize_record_edit_presence
ON realtime.messages
FOR ALL
TO authenticated
USING (
realtime.topic() LIKE 'record_edit:%'
AND split_part(realtime.topic(), ':', 2)::uuid = fn_get_current_user_unit_id()
);

4. Run:

supabase db push

5. Observe:

ERROR: must be owner of relation messages
SQLSTATE 42501

6. Execute the exact same SQL from the Supabase SQL Editor as the postgres role.

7. The policy is created successfully.

Crash report ID

No response

Docker and service versions

Docker Desktop 29.6.2
Docker Engine 29.6.2
Go version go1.26.5
API version 1.55

Additional context

Additional investigation:

• The SQL matches the official Realtime Authorization documentation.
• The same SQL succeeds from the SQL Editor using the postgres role.
• The failure only occurs when executed through supabase db push.
• No ALTER OWNER, REASSIGN OWNED or manual ownership changes have been performed.
• Current owners:
  • realtime.messages -> supabase_realtime_admin
  • realtime schema -> supabase_admin
• Supabase Discussion:
  Cannot create RLS policy on realtime.messages from migration: "must be owner of relation messages" (SQLSTATE 42501) supabase#48812

A Supabase collaborator suggested opening this issue because the problem appears specific to the CLI migration execution.

[clearpath-lb]

What is the version of your Realtime?