Column-level privileges feedback

[alaister]

We're excited to announce the release of the column-level privileges management UI: It allows you to grant or revoke privileges on tables and columns based on user roles.

What do you like most about it? Least?
Are there any features you find particularly useful?
Anything you think could be improved?
Anything you think is missing?

Happy to hear your thoughts, suggestions, and experiences.

[rohankm]

Hi, custom roles are not being shown in the select option

[markledwich2]

I can't find this in the product atm

[GaryAustin1]

It is a preview feature. Down on the bottom left is a "person" icon. Click that and you will see a preview option.

[FilipeMarch]

The UI does not work.

When I click on Apply Changes, it resets everything to the original state

supabase_col_privilege_bug-2024-02-13_18.24.04.mp4

Has anyone ever used this feature?

[GaryAustin1]

It applies correctly for me.

You might check the Postgres logs for errors that are silently stopping the process. Do you use Prisma (which messes with grants)?

[FilipeMarch]

It applies correctly for me.

You might check the Postgres logs for errors that are silently stopping the process. Do you use Prisma (which messes with grants)?

The error happens when your table is named "users".
I don't use Prisma.

[joaoguidev]

Hello.

Great feature!

The only thing is that my custom roles are not there to be selected.

The only roles available are the usual, anon, service_role and authenticated.

[ofekd]

Can you explain why you treat this as an advanced feature and recommend avoiding it if possible? Is that the Alpha state or some inherent thing about it?

[trunghuynh291199]

How can I hide some columns even when I select (*)?

[savikko]

Just as a feedback two "issues" (otherwise seems to be working nicely):

• Lets say we have a table where one user has select permission to subset of the fields. Then, when using Supabase UI "impersonate" feature on Table Editor, if that target user does not have permission to all fields, the UI just times out (even though the request fails with HTTP status 400 - permission denied)
• On Column Level Privileges admin, if i have smaller browser window (vertically), i am unable to select tables which do not fit the dropdown (or actually the window)

[alitnk]

Would this be available on a local Docker instance? I can't find the page nor the preview toggle.

[mikob]

The page is here: http://127.0.0.1:54323/project/default/database/column-privileges
But even after enabling it, it doesn't seem to load and CLS doesn't seem to be working correctly for me (select * still gets all the columns)

[rossbishop]

Seeing the same as @mikob here - are there any plans to fix this for running locally?

[alaister]

Hi,

Thanks for reporting. This should now be fixed, please try updating your CLI.