Skip to content

failed_webhook_events table missing RLS policies #161

@Ayush-Patel-56

Description

@Ayush-Patel-56

Problem

The failed_webhook_events table added in the recent migration has no Row Level Security. Any authenticated user can read or write to it directly via the Supabase client.

Fix

Add a new migration:

ALTER TABLE failed_webhook_events ENABLE ROW LEVEL SECURITY;

No user-facing policies needed since this table is only accessed via the service role key. Enabling RLS blocks the anon and authenticated roles by default.

Metadata

Metadata

Labels

GSSOC26GirlScript Summer of Code 2026backendBackend / API / DB relatedbugSomething isn't workinglevel:intermediateIntermediate level difficultytype:securitySecurity fix or improvement

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions