Munaf-Khatri

1thread

2replies

Threads created

Automating pgTAP tests for RLS in Supabase

Munaf-Khatri developed 'rlsautotest', a tool to automate pgTAP test generation for Supabase RLS policies. The tool reads RLS policies, generates pgTAP suites, and creates seed data to verify access controls per table and command. It's open source and aims to prevent data leaks by ensuring policies are correctly enforced.

Security

Database

Recent replies

Reply to: Automating pgTAP tests for RLS in Supabase

6/22/2026, 6:11:16 PMView on Reddit

pgTAP tests that act as each identity (owner/other user/anon) and assert who's blocked, run in CI. I built rlsautotest to auto-generate them + the auto seed data (disclosure: mine): [https://github.com/unitautogen/rlsautotest](https://github.com/unitautogen/rlsautotest)

6/22/2026, 1:08:41 PMView on platform

Loading user profile...