how do i disable realtime "Allow public access" setting on local development

[dudilugasi]

I’m trying to set up a real-time listener for changes on a table. The table is supposed to be accessible only to authenticated users, but even when I’m not authenticated, I can still receive the real-time updates through the Supabase client.

I found that I’m supposed to disable a specific toggle to prevent this, but there doesn’t seem to be an option for it in the project.toml file. Is it even possible to configure this correctly in a local development environment?

[GaryAustin1]

Realtime access by user type is controlled by RLS. For Postgres Changes it is select RLS on the table. For Database Broadcast with a private channel it is RLS on realtime.messages.

There are some new setting for all of realtime to turn things off, but they are not on a table by table basis.