Supabase RLS Policy Generator

Generate Row Level Security policies for your Supabase tables. Pick a template or build a custom policy, then copy the SQL.

Quick Templates

Table Name

Policy Name

Role

Operation

USING Expression (which rows can be seen)

WITH CHECK Expression (optional — validates new/modified rows)

Include ALTER TABLE ... ENABLE ROW LEVEL SECURITY

Generated SQL

ALTER TABLE public.your_table ENABLE ROW LEVEL SECURITY;

CREATE POLICY "allow_select_own"
  ON public.your_table FOR SELECT TO authenticated
  USING (auth.uid() = user_id)
;

Always test RLS policies in a development environment before deploying to production. Use supabase test or the Supabase SQL Editor to verify your policies work as expected.

Related Guides

Supabase RLS Policies That Actually Work [2026]

The patterns that hold up under attack, the debugging workflow, and the policies you can ship today.

Backend-Only Data Access in Next.js + Supabase

The architectural alternative to RLS-only protection. Server-side queries, admin client, no client-side data access.

Supabase RLS Not Working? 7 Symptoms and the Fix [2026]

The diagnostic procedure for a policy that is already deployed and silently broken. SQL editor role-switching plus the 7-symptom catalog.

How to Test Supabase RLS Policies with pgTAP [2026]

Automated RLS regression tests at the database layer. Impersonate the authenticated role, assert read and write isolation, and run them in CI on every migration.