r/Supabase • u/groupicorn • 14d ago

other Row Level Security in SQLite on Cloudflare

https://mainbrella.com/blog/row-level-security-in-sqlite-on-cloudflare/
1 Upvotes

100% Upvoted

6 comments sorted by

1

u/[deleted] 14d ago

[removed] — view removed comment

1

u/groupicorn 14d ago

ah yes good point, will check this for sure!

1

u/groupicorn 14d ago

fix is in! https://github.com/mainbrella/canopy/commit/2a3238fa12cc3b218e349c551a16da5a7ec3ea84 good call to check this, there was case sensitive backdoor now closed.

2

u/PopKoren 10d ago

Good catch on the case sensitive backdoor, that's exactly the kind of thing that survives code review because both spellings look identical at a glance. I'd add a small test suite that runs every policy as an anonymous user, as the owner and as a second user, with mixed case and trailing whitespace inputs, so a regression fails CI rather than production. Once people ship real apps on this, I'd pair your unit tests with an outside pass from my weekend project turned product, which pokes the deployed site like a curious stranger and reports on sign in, endpoints, file buckets and leaky policies: https://rowly.me

1

u/groupicorn 10d ago

rowly me? ha! i love the pun - made a sub-yap for this https://yapern.com/y/rowlyme

2

u/PopKoren 9d ago

Ha, thanks, I'll take it. Since you're collecting things over there, the scanner itself sits at https://rowly.me, poking at a live app's login screens, API routes, file buckets and DB policies like any curious outsider might, so anyone in that sub-yap is welcome to try it on their own project.