fix(chapter-15): default public tables to deny-all RLS

↗ view on GitHub · Amal · 2026-05-24 · e3efabf0

Chapter: 15 - Database defense in depth.

Plain-English map:
Enable Row Level Security fallback policies that deny browser/client roles by
default on public tables.

Why it matters:
The backend uses a service role, but mistakes happen. If a future grant or
client path exposes a table, the database should still default to no access.

Principle:
Least privilege by default, with explicit access instead of accidental access.

Precedent borrowed:
Upstream PR #145.

Upstream base: willchen96/mike@d39f580.
Original local commit: faa098c.
Repository amal66/mike
Author Amal <mamalanand3@gmail.com>
Authored
Parents 112a9a53
Stats 1 file changed , +63
Part of Supabase migrations and database integrity

Capture this commit into my fork

Download a Markdown prompt that tells Claude how to port this exact commit into your working tree. Run it via claude -p < capture-commit-e3efabf0.md from inside the repo you want the change in.

⬇ Download capture-commit-e3efabf0.md