Browse categories
Explore
Fiverr Pro
English
$
USD
I will fix supabase login, rls and security issues in your lovable or bolt app
Ghazanfar P
About this gig
Lovable's security scan flagged your Supabase tables, users can't log in, or they can see each other's data.
I fix Supabase login, Row Level Security (RLS) and data access in apps built with Lovable, Bolt, Replit and Cursor. In 2025 a security researcher found 170 Lovable apps exposing user data through weak RLS. I make sure yours isn't one of them.
What I fix:
- Tables with RLS off, or policies that let anyone read everything
- "new row violates row-level security policy" errors
- Login, sign-up, magic link and password-reset bugs
- Users seeing other users' data
- Public storage buckets and secret keys in the browser
- Supabase Security Advisor warnings
How it works:
1. Message me your app link and the problem.
2. I check your project and confirm the price and time.
3. I fix it, test with real user accounts, and send a report covering every table and policy.
Before changing anything I save your current policies, so every change can be undone. I work through a team invite, never your password.
Get to know Ghazanfar P
Ghazanfar P
AI Agents and Automation Developer: n8n, RAG, MCP, Former NFT Smart Contract Dev
- FromPakistan
- Member sinceJan 2022
- Avg. response time1 hour
- Last delivery2 years
Languages
English, Hindi, Urdu
Smart contract developer turned AI automation engineer. Since 2022 I've shipped Solidity smart contracts (ERC-721A, ERC-721C, ERC-20, gas-optimized NFT mints) and dApps for NFT and crypto clients, with 141 five-star reviews.
Now I build AI agents and agentic workflows: n8n, Make and Zapier automations, RAG chatbots, MCP servers, AI document extraction, Claude Code setups and LLM integrations (OpenAI, Claude, Gemini). I also fix and ship Lovable, Bolt and Replit apps.
Code that handles money taught me to test everything and secure it by default. Your AI gets the same care.
Other Vibe Coding Services I Offer
FAQ
My app uses Lovable Cloud. Can you still help?
Usually, yes. Lovable Cloud is built on Supabase, so the same RLS rules apply, and I make the changes through your Lovable project. Message me first so I can check what your setup allows.
Will my users lose data or get logged out?
No data is deleted. Before changing anything I save your current policies so every change can be undone, and I test with test accounts. If a fix needs users to log in again, I'll tell you first.
What access do you need?
An invite to your Supabase organization as Developer or Administrator, plus your app project or GitHub repo. Never paste passwords or secret keys in chat.
Is RLS enough to make my app secure?
It's the most important layer for a Supabase app, not the only one. My report also covers storage, exposed keys, edge functions and login settings. Nobody can honestly promise 100% security; I fix the known gaps and show what's left.
Can you add admin and member roles?
Yes, in Standard or Premium. I add a roles table and policies so admins see everything and members see only their own data, then test both as real users.
What is the Supabase API key change?
Supabase is deprecating the old anon and service_role keys by the end of 2026 in favor of publishable and secret keys. Premium includes the switch, or you can add it as an extra.
