What is probably broken
Your app reads and writes data locally, but in production every query returns permission denied because RLS policies are too restrictive or missing.
Your app reads and writes data locally, but in production every query returns permission denied because RLS policies are too restrictive or missing.
Correct RLS policies that protect data while allowing your app to function, with service role keys properly secured.
STEP 01
Check your app logs and Supabase dashboard to identify which tables and queries are blocked.
STEP 02
Write policies that allow legitimate app access while keeping data protected.
STEP 03
Service role keys bypass RLS. They must never reach the browser.
Quick check
If you cannot tick all five, we can fix it. Send us the repo and we handle the rest.
Free checklist
Get the exact 5-step checklist we run before every deploy. No fluff, just the things that actually break.
Done-for-you deploy
Fixed price per repo. 24h delivery or full refund. No hourly billing.
Related guides
A practical checklist for moving a Lovable-built app to your own VPS with custom domain, environment variables, database, SSL, backups, and smoke tests.
Read guideA practical checklist for self-hosting Supabase with Docker Compose, named volumes, backups, env vars, and restore testing before going production.
Read guideA practical plan for consolidating several small apps, databases, analytics, storage, and backups onto one production VPS without making a server mess.
Read guide