Hi,
I posted about a UI builder (AppGrape studio) for Supabase in this sub last week - and a lot of people reached out to ask about the security aspects of the connection, specifically RLS and service keys. So, I made a detailed video explaining these. In short,
AppGrape Studio
- doesn't ask for service keys or API secrets for the connection
- connects to supabase through standard OAuth handshakes
- respects RLS, RBACs and policies from the get-go
- only allows supabase auth users
- allows no-code UI building without AI
For context, we built AppGrape Studio for internal use within our agency because we wanted a deliberate, deterministic UI builder to run clients' businesses. We care a lot about security and first principles, so we want to make the code open source - we are working on this and will release the repo shortly.
The user introduces AppGrape Studio, a UI builder for Supabase that connects via OAuth without requiring service keys or API secrets. It respects RLS and RBAC policies and is designed for secure, no-code UI building. The user plans to open source the project. Another user questions the market need for such a tool compared to AI-driven UI builders.
I'm thinking about the pros and cons of something like AppGrape studio. My first thought is that I always use AI to build the UI. And if the UI is too complicated to use AI, then it would also be too complicated to use a UI builder.
If I'm repeatedly building a specific type of product like a Restaurant Management SaaS. Then I could build a software framework and not rely on a UI builder.
I'm trying to understand what the market is here. It's a cool idea but curious what type of customers have been using it?
Well, this is probably not going to replace AI UI builders - which is sufficient for quick shipping of PoC, MVP, small tools. But when it comes to internal ERP systems, for instance, that reliably run businesses, we find that the UI needs to be easily reliably modified by the knowledge workers. Integrations and workflows need to be intentionally built with fool proof security. That's where tools like these are necessary.