Fixmedium riskhigh confidencecommunity validated

Securing public.profiles with safe RLS

Allow public read of non-PII columns only.

By Contributor · published 3/31/2026

In plain English

Protect your users' privacy by hiding sensitive details like email addresses while still allowing the app to display basic public information. This simple setup ensures you only share the data people need to see, keeping everything else secure.

Use a view that omits email.

Discussion

0 comments

Loading comments…

Want the technical version? Switch the detail level at the top of the page toBuilder orTechnical.