# Build a Project Management Tool in Lovable - Tool: Lovable Prompts - Last updated: June 2026 ## TL;DR Paste the starter prompt into Lovable Build mode and get a multi-tenant Kanban project management app with organizations, projects, tasks, drag-and-drop ordering, Supabase Realtime live board updates, and an invite-by-email flow. Build time is roughly one day. Expected credit burn is 150–250 credits on a Pro $25/mo plan. ## Frequently asked questions ### Why does Lovable struggle so much with multi-tenant RLS? Lovable scaffolds RLS policies by pattern-matching your schema. When it sees a members table with an org_id column, it often writes the SELECT policy as USING (org_id IN (SELECT org_id FROM members WHERE user_id = auth.uid())), which subqueries the same table the policy is protecting. PostgreSQL detects the recursion and throws an error. The fix is a SECURITY DEFINER plpgsql function that the optimizer cannot inline — it runs with elevated privileges and bypasses the policy check for its own query. This pattern is what the starter prompt provides for both is_org_member() and can_see_project(). ### Can I start single-tenant and add orgs later? You can, but it requires a significant schema migration: every tasks, projects, and comments row needs an org_id column added, all RLS policies need to be replaced, and all queries need an org_id filter added. If you have more than one user or expect to add a second team in the next 6 months, build multi-tenant from day one using this kit. The starter prompt includes create_org() so even a single-founder build starts with the right structure. ### How do I prevent User A from seeing members from User B's org? The members SELECT policy must use USING (is_org_member(org_id)) — the SECURITY DEFINER plpgsql function, not a raw subquery. If you see members from other orgs, your current policy is either USING (true) (leaks everything) or USING (user_id = auth.uid()) (shows only your own row, not your co-members). Drop and recreate the policy using the is_org_member function from the starter prompt. ### What happens when two people move the same card at the same time? dnd-kit's optimistic UI shows both moves locally. The Supabase updates race server-side — whichever arrives last wins. The final position in the database is correct (no data corruption), but one user's move might be visually reversed within a second or two as the Realtime subscription broadcasts the winning update. For a small team Kanban board this is acceptable. If you need stronger consistency, implement server-side optimistic locking with a version column and reject stale updates from the client. ### How many concurrent users can the Realtime board handle on Free? Lovable Cloud (Supabase Free tier) supports 200 concurrent Realtime connections. Each browser tab with an open board holds one connection. For a team of 20 with multiple tabs, you could hit this limit. Supabase Pro at $25/mo raises the cap to 500 concurrent connections. Beyond that, you'd need to either rate-limit subscriptions (one per org instead of one per board tab) or move to Pusher. ### Should I use position as an integer or float for drag-reorder? Use double precision (float) for fractional rebalancing: when you drop a card between two cards at positions 100 and 200, the new position is 150 — no need to renumber other rows. The trade-off is floating-point precision: after many drops between the same two cards, adjacent positions converge and eventually the difference is below 0.0001. Detect this and trigger a full-column renumber (0, 100, 200, 300...) before it becomes a problem. The starter prompt's KanbanBoard includes this check in the onDragEnd handler. ### When is it cheaper to just pay for Asana or Linear? If your team is under 10 people and you fit standard workflows, Asana Free or Trello Free are excellent and cost nothing — you'll spend more in Lovable credits than the SaaS would cost in several years. Build in Lovable when you need a vertical PM tool (construction, healthcare, legal) with custom fields, or you're building a SaaS product where end-customers each get their own org and per-seat fees would be prohibitive. If your build outgrows this prompt kit and you need custom architecture, RapidDev builds production-grade Lovable apps at $13K-$25K — book a free 30-minute consultation at rapidevelopers.com. --- Source: https://www.rapidevelopers.com/lovable-prompts/lovable-prompts-for-building-project-management-tool © RapidDev — https://www.rapidevelopers.com/lovable-prompts/lovable-prompts-for-building-project-management-tool