Supabase is an open source Firebase alternative. Start your project with a Postgres database, Authentication, instant APIs, Edge Functions, Realtime subscriptions, and Storage.

Supabase

I'm guessing it doesn't know what the Id we're trying to insert is.. but what's the point of rls if you can't check before inserting!

This (and the example above it) might help:

https://supabase.com/docs/guides/auth/row-level-security#policies-with-security-definer-functions

you have access to the inserted data on check so shopID gets you that value

Firstly thanks for helping <@764524500162445402> - I tried something like shopID IN (SELECT shopID FROM shop_access WHERE userID = uid()) and still no luck . Seems very odd! Really not sure why it doesn't work

Do you have RLS on shop_access and if so select access for uid?

Yeh! But the way your saying this makes me think I need to persevere, must be something basic going on

I'm guessing you've done this before right, I'm not making up an anti pattern of postgre or something?

I use the security definer function route myself, but what you have above seems to be the same as what SB select example does as far as that specific code.

Awesome.. thanks so much for your help Gary, really appreciate it!!

Hey <@!313441475151134721> if you are doing insert you need to be doing WITH CHECK not USING (as in the example for updates).  That looks at new data.