Supabase Requires Explicit Postgres Grants for Data API — Default-Deny for New Projects May 30

Supabase·low signal

New Supabase projects can now opt out of automatic Data API exposure for public schema tables. Explicit Postgres grants are required to make a table reachable via PostgREST or GraphQL. This becomes the default for all new projects on May 30, 2026 — a significant security posture change for the platform's 1M+ developers.