Supabase bucket - new row violates row-level security policy for table "objects"

Question

i am having an issue with uploading avatars to my supabase bucket as its giving me "new row violates row-level security policy for table "objects"". I tried other StackOverflow solutions and nothing. Before trying to upload I log in using supabse so my user is authenticated yet its still not letting me upload. I added this policy in storage.objects:

(role() = 'authenticated'::text) and clicked the insert button. Does anyone know what I am doing wrong? I assume its something to do with the policies. Thanks

this is how I'm trying to upload my avatar:

try{
                const { data, error } = await supabase
                    .storage
                    .from('/public/avatars')
                    .upload(`${values.email}.png`, values.avatar, {
                        cacheControl: '3600',
                        upsert: true
                });
                if(error) throw error;
            }catch(error){
                console.log(error);
            }

score 15 · Accepted Answer · answered Nov 16 '22 at 22:29

15

add new policy and enjoy :)

Because upsert need DELETE and UPDATE

answered Nov 16 '22 at 22:29

Juan Silupú Maza

647
6
7

1

This is terribly permissive, basically allowing auth'd users to do anything they want to the bucket to any folders. – Brady Dowling Aug 26 '23 at 00:05

score 1 · Answer 2 · answered Nov 07 '22 at 06:37

I'm guessing you have a bucket named public with a folder named avatars, correct?

In that case you would upload as follows:

const avatarFile = event.target.files[0]
const { data, error } = await supabase
  .storage
  .from('public')
  .upload(`avatars/avatar1.png`, avatarFile, {
    cacheControl: '3600',
    upsert: false
  })

Supabase bucket - new row violates row-level security policy for table "objects"

2 Answers2