---
title: "Discussion on \"Supabase view bypasses RLS? Fix it with security_invoker (and lock down SECURITY DEFINER functions)\" | Hashnode"
description: "Discussion on \"Supabase view bypasses RLS? Fix it with security_invoker (and lock down SECURITY DEFINER functions)\". Disclosure: we build SniffPup, a free passive scanner for live sites. This guide was first published on our site. The SQL follows Supabase's own docs and works without our tool.\nFirst published on sni"
url: "https://hashnode.com/posts/supabase-view-bypasses-rls-fix-it-with-security-invoker-and-lock-down-security-definer-functions/6af31945ecd7fc3e101fdf97"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Supabase view bypasses RLS? Fix it with security\_invoker (and lock down SECURITY DEFINER functions)](https://sniffpup.hashnode.dev/supabase-view-bypasses-rls-fix-it-with-security-invoker-and-lock-down-security-definer-functions?utm_source=hashnode&utm_medium=feed)

Disclosure: we build SniffPup, a free passive scanner for live sites. This guide was first published on our site. The SQL follows Supabase's own docs and works without our tool. First published on sni

1d ago · 7 min read · sniffpup.hashnode.dev  
Read the article

-   [#supabase](https://hashnode.com/tag/supabase)
-   [#postgres](https://hashnode.com/tag/postgres)
-   [#security](https://hashnode.com/tag/security)
-   [#webdev](https://hashnode.com/tag/webdev)

## Written by

[SniffPup](https://hashnode.com/@sniffpup)

@sniffpup

  
[View profile](https://hashnode.com/@sniffpup)

The SniffPup team account. We build SniffPup, a free passive security scanner for vibe-coded apps (sniffpup.com).

## Responses

Markdown supported · ⌘↵ to post

No responses yet.