---
description: Define secure database policies to protect user data
---
1. **Enable RLS**:
- Always enable RLS on every table you create.
2. **Create "Select" Policy**:
- Allow users to see only their own profile.
3. **Create "Update" Policy**:
- Allow users to update only their own profile.
4. **Pro Tips**:
- Use the
- Test your policies in the Supabase dashboard using the "Impersonate User" feature.
description: Define secure database policies to protect user data
---
1. **Enable RLS**:
- Always enable RLS on every table you create.
alter table profiles enable row level security;2. **Create "Select" Policy**:
- Allow users to see only their own profile.
create policy "Users can view own profile"
on profiles for select
to authenticated
using ( auth.uid() = id );3. **Create "Update" Policy**:
- Allow users to update only their own profile.
create policy "Users can update own profile"
on profiles for update
to authenticated
using ( auth.uid() = id );4. **Pro Tips**:
- Use the
anon role for public data (like blog posts).- Test your policies in the Supabase dashboard using the "Impersonate User" feature.
By Antigravity Team
How to Use This Workflow
Option A: Project-Specific (Recommended)
- Click "Download" above
- In your project, create the directory:
.agent/workflows/ - Save the file as
configure-supabase-row-level-security-rls-policies.md - In Antigravity, type
/configure_supabase_row_level_security_rls_policiesor just describe what you want to do
Related Workflows
Setup Local Database (Postgres)
DatabasePostgresLocal Development+1
--- description: Quick setup for a local Postgres database using Docker --- 1. **Install Docker Desktop**: - If you don't have Docker installed, download and install Docker Desktop for your OS. // turbo - Run `open https://www.docker.com/products/docker-desktop/` 2. **Create `docker-compo...
Setup Supabase Realtime
Real-timeSupabaseWebSocket
--- description: Real-time data sync --- 1. **Enable Realtime**: - Go to Database → Replication in Supabase. 2. **Subscribe to Changes**: ```tsx const channel = supabase .channel('messages') .on('postgres_changes', { event: '*', schema: 'public', table: 'messages' }, (payload) =...
NextAuth.js (Auth.js) v5 Setup
AuthNextAuthSecurity+1
--- description: Complete boilerplate for secure authentication with Google/GitHub --- 1. **Install Dependencies**: - Install the NextAuth.js beta version. // turbo - Run `npm install next-auth@beta` 2. **Setup Environment Variables**: - Add to `.env.local`: ```bash AUTH_SECRET="...
Recommended Rules
View more rules →🔒 Security Audit Agent - Vulnerability Detection
Agentic AISecurityVulnerability
You are an expert security audit agent specialized in identifying vulnerabilities and security risks. Apply systematic reasoning following OWASP guide...
📊 Database Design Agent - Schema & Query Expert
Agentic AIDatabaseSQL
You are an expert database design agent specialized in creating efficient, scalable, and well-normalized database schemas. Apply systematic reasoning ...
Python Security Best Practices
PythonSecurityCryptography
You are an expert in Python security and secure coding practices. Key Principles: - Never trust user input - Use principle of least privilege - Keep ...
