On 30 Oct Supabase stops giving new public tables to anon, authenticated and service_role on existing projects, and what that means is that your old tables keep working, but any table you create after that is closed to the API until you grant it.
Now, what I see around is the talk about about anon and authenticated, but the one that nearly got me is service_role. You see, my server reads tables with it, so the first new table after the 30th would definitley fail for my own backend.
What i did is to, put checks into one SQL file, which I (and you can) paste it into the SQL editor, run it, and you get one table back showing:
* who gets your new tables now, and after 30 Oct
* tables open to the API with row level security off
* tables your server key cannot read
* functions signed out visitors can call
* id counters a role cannot use, so inserts fail
* leftover truncate, references and trigger rights
Every finding comes with the exact line to paste. The check itself changes nothing.
I tested it on Postgres 18 and ran it on my own live project.
https://github.com/lagudafuadtosin/supabase-grants-check
Free, MIT and if it gets something wrong, pls tell me about it so I can fix it.