Supabase says tables in exposed schemas should have RLS enabled. Tables made through raw SQL need particular attention.
Free Lovable + Supabase RLS checker
Spot dangerous RLS policy patterns before you launch.
Paste table and policy SQL. The checker flags missing RLS, overly broad access, unsafe metadata, incomplete write rules, view bypass risk, and other common mistakes.
✓ Runs in your browser✓ SQL is not uploaded✓ No database credentials
Policy SQLDo not paste keys, passwords, customer data, or database connection strings.
0 characters
Why this matters
A policy existing is not the same as a policy working.
INSERT uses WITH CHECK. UPDATE commonly needs both USING and WITH CHECK, plus a matching SELECT policy.
Use two synthetic users and verify signed-out, owner, non-owner, and privileged behavior for every operation.
Method informed by official Lovable security guidance and Supabase Row Level Security documentation. Always confirm current platform behavior in the official docs.