Supabase RLS — 5 Common Mistakes I Broke and Fixed Myself

I had RLS enabled on a Supabase project and data still leaked. A single anon API key read another user's entire notes table. No error message. The problem was that I'd only configured half of it. It took two hours to find what was missing. RLS (Row Level Security) is PostgreSQL's row-level security