Repository navigation

Sealing migrations revoke a read-only member's SELECT whoever granted it - #6781

Merged

habdelra merged 7 commits into

mainfrom

cs-14022-sealing-migrations-up-should-remove-select-a-readonly_role

Oct 19, 2026

Merged

Sealing migrations revoke a read-only member's SELECT whoever granted it#6781
habdelra merged 7 commits into
mainfrom
cs-14022-sealing-migrations-up-should-remove-select-a-readonly_role

Commits on Oct 16, 2026
- Sealing migrations revoke a read-only member's SELECT whoever granted it
  
  habdelra
  and
  claude
  committed
  0a87986
- down() waits for a grantor's own grant option, not an inherited one
  
  habdelra
  and
  claude
  committed
  8a74cbf
- Sealing migrations leave the table owner's own privileges alone
  
  habdelra
  and
  claude
  committed
  7c6e7ac
- Repair the read-only role's withheld tables on already-migrated databases
  
  habdelra
  and
  claude
  committed
  23a40bb
- Drop the repair migration, and count readers through other roles
  
  habdelra
  and
  claude
  committed
  61ef0a7
Commits on Oct 19, 2026
- Revoke owner-made grants first in the read-only revoke loop
  
  habdelra
  and
  claude
  committed
  ecd2d7c
- Revoke column grants before table grants in the read-only revoke loop
  
  habdelra
  and
  claude
  committed
  826b1d2