Supabase is an open source Firebase alternative. Start your project with a Postgres database, Authentication, instant APIs, Edge Functions, Realtime subscriptions, and Storage.

Supabase

quick question, is it possible to give insert access to anyone but not read access?

I created this policy but it isnt working
```
CREATE POLICY "enabling_insert_access"
ON public.usuarios
FOR INSERT WITH CHECK (
  true
);
```

Make sure you have insert with returning set to minimum or the insert does a read.  At least in JS.

I'm doing this, doesnt work on postam or js

```
curl --location --request POST 'https://url.supabase.co/rest/v1/usuarios' \
--header 'apikey: abc' \
--header 'Content-Type: application/json' \
--header 'Prefer: return=representation' \
--data-raw '{ "dni": "111", "email": "probando","name":"gonzalo" }'
```

I'm not familiar with the format you are showing, but possibly return=representation means return the record.  Try setting a RLS for select and see if it works then.

"By default, every time you run insert(), the client library will make a select to return the full record. This is convenient, but it can also cause problems if your Policies are not configured to allow the select operation. If you are using Row Level Security and you are encountering problems, try setting the returning param to minimal."

They really should switch this as it is biting lots of people.  Including me.

seriously ... thank you ... was pulling my hair for the last couple of hours with this

<@!324814815312740353> I was wondering the same thing a while back and asked, read this: https://discord.com/channels/839993398554656828/843999948717555735/874709321190092821

an example for people who are looking here! 
```sql
CREATE TYPE public.event_type AS ENUM ('MESSAGE_CREATED');
```

I wonder why there isn't UI to create enum

Cause its a new feature! I believe they sent a tweet out recently accouncing it

i spent like 15 minutes to find where to define enum

but 2 - 3 days ago i didnt know where to define it

Hi all- getting this error when i try to add a number to the cell. Not sure if this is a bug or my own error, but I cant seem to get the column to just accept the number. Already tried setting the column as text, int, varchar, float etc. Getting an error on every one. It was working fine before and now its not. https://prnt.sc/1xb350q

could it be another column that's contributing to the error?

I think you can do something like this:
```js
const { data, error } = await supabase
  .from('movies')
  .select('title, release_date')
  .gte('release_date', '2000-01-01')
  .lte('release_date', '2020-01-01')
```

Got `{ message: 'The upstream server is timing out' }`

Hey! Supabase dosen't support that. What platform are you working with? If its mobile you could implement it client side 🙂

is your project URL correct for your client?

Are you just adding a constant number to each column or adding 2 columns together?

also it shouldn't be varchar it should be a float or double afaik

I tried to host a static privacy policy html file on Storage (public bucket) - but when I access the URL from a browser, it render the source code

__So far:__
Link: https://rcymrjihsztzenrgtqfb.supabase.in/storage/v1/object/public/html/privacy-policy.html

It is sending text/plain insted of the HTML mime type.
https://cdn.discordapp.com/attachments/843999948717555735/902494227055931452/Screenshot_2021-10-26_at_10.49.37.png

<@!873786476557660201> Can you send me a screenshot of your supabase bucket with the file?

Yeah seams like supabase is doing it then. Might want to:
a) file an issue
b) create a suggestion in <#867348150741237790> to allow text/html

I think you would need an endpoint with somthing like cloudflare workers, vercel/next.js to download the content and send it with the html mime type

On Amazon S3 you can host static html - is this intentionally disabled on Supabase Storage

https://docs.aws.amazon.com/AmazonS3/latest/userguide/WebsiteHosting.html

https://rcymrjihsztzenrgtqfb.supabase.in/storage/v1/object/public/html/privacy-policy.html

<@!660159621469831189> https://canary.discord.com/channels/839993398554656828/839993398554656831/902503865700728872

So, you want to upload images to supabase storage and access them with a URL?

If you click copy URL it gives you the images URL

e.g. `https://czhsvwmgbalihosltjzy.supabase.in/storage/v1/object/public/uploads/5b12da78-f01a-404a-9365-de790899e85e/2c5522af-950b-408e-a13c-719f275bf2ad` in my case

Ahh, I meant to say media server.
like one the fly image modifications

https://developers.cloudflare.com/images/cloudflare-images/resize-images

I guess you could do it with CF Workers or a Next.js/Vercel API endpoint

I was thinking if there is a out of the box in supabase at the moment for now.

Image CDN with on the fly image modifications

https://czhsvwmgbalihosltjzy.supabase.in
this will not change, correct? Just confirming.

Correct! Once the project is created that is then the domain

Awesome!
Thank you.
I can use Cloudflare Image Optimization

One more quick question!
The CDN Supabase has ATM is just cloudfront right?

As far as I understand, in a Supabase setup everything in the "public" schema is exposed via PostgREST. 

However, since the "public" schema is also the default schema in PostgreSQL (i.e. any statement which does NOT explicitly reference a schema, will use it), it is easy to accidentally expose internal data to the world via PostgREST.

PostgREST allows specifying which schema to expose (https://postgrest.org/en/v7.0.0/configuration.html#db-schema) - can we use that in Supabase and change the schema which is exposed?

I guess the same goal can be achieved by changing the default schema for PostgreSQL itself to something other than public

I see that the latter can be achieved (https://stackoverflow.com/a/21790972/2606261), however, I think changing the PostgREST default API schema has a couple of advantages - so is that currently possible?

might be worth adding it to <#867348150741237790> for the team

That's what I was thinking but didn't know what ltRange and gtRange were or how they work and was thinking of using those. Thanks!