4 people reported
All time, since May 1.
Cannot secure spatial_ref_sys table
“Enabling RLS fails with "must be owner", and moving PostGIS to the extensions schema fails with "must be owner of extension".”
Is this your bug? What gets counted gets fixed. Pile on.
Paste this into your agent. It files your report, with your error and version.
I hit this bug: rapsheet.dev/sheets/supabase/issues/8766/file Follow it to file my report. Show me the text before you send.
No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends
Cannot secure PostGIS spatial_ref_sys table owned by supabase_admin. Advisor flags rls_disabled_in_public; enabling RLS, revoking anon grants, or moving PostGIS to extensions fails due to ownership.
Is this your bug?
File my report- Where
- PostGIS extension
- Error text
42501: must be owner of table spatial_ref_sys- How bad
- Security risk: something exposed, or done without permission.
Original reports4, newest first
- Cannot revoke anon/authenticated write access on public.spatial_ref_sys — REVOKE as postgres silently does nothing#52113
- anon role can UPDATE/DELETE public.spatial_ref_sys (owned by supabase_admin), project owner cannot revoke#51290
- Cannot enable RLS on public.spatial_ref_sys — postgres user is not owner (exploit verified via REST API)#46438
- Erro crítico de segurança no advisor não resolvível pelo cliente: RLS Disabled in Public em public.spatial_ref_sys (PostGIS gerenciado)#45469