Skip to content

fix(grants): add DEFAULT PRIVILEGES for authenticated/anonymous + polling error logging #99

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
devin-ai-integration merged 2 commits into from
Jun 14, 2026
Merged

fix(grants): add DEFAULT PRIVILEGES for authenticated/anonymous + polling error logging #99

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
026bbd3
fix(grants): add DEFAULT PRIVILEGES for authenticated/anonymous + err…
pyramation Jun 14, 2026
41f33c6
fix: remove unnecessary anonymous role grants
pyramation Jun 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions ...e/deploy/schemas/constructive_compute_public/schema/default_table_privs/authenticated.sql
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
-- Deploy: schemas/constructive_compute_public/schema/default_table_privs/authenticated
-- made with <3 @ constructive.io

-- requires: schemas/constructive_compute_public/schema


ALTER DEFAULT PRIVILEGES IN SCHEMA "constructive_compute_public" GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO authenticated;
1 change: 1 addition & 0 deletions pgpm/constructive-compute/pgpm.plan
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,7 @@ schemas/constructive_compute_public/schema/default_function_privs/authenticated
schemas/constructive_compute_public/schema/default_seq_privs/administrator [schemas/constructive_compute_public/schema] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add alter_default_privileges_grant_on_sequences
schemas/constructive_compute_public/schema/default_seq_privs/authenticated [schemas/constructive_compute_public/schema] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add alter_default_privileges_grant_on_sequences
schemas/constructive_compute_public/schema/default_table_privs/administrator [schemas/constructive_compute_public/schema] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add alter_default_privileges_grant_on_tables
schemas/constructive_compute_public/schema/default_table_privs/authenticated [schemas/constructive_compute_public/schema] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add alter_default_privileges_grant_on_tables
schemas/constructive_compute_public/tables/platform_function_graph_execution_outputs/table [schemas/constructive_compute_public/schema] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add create_partitioned_table
schemas/constructive_compute_public/tables/platform_function_graph_execution_outputs/alterations/alt0000002636 [schemas/constructive_compute_public/tables/platform_function_graph_execution_outputs/table schemas/constructive_compute_public/schema] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add disable_row_level_security
schemas/constructive_compute_public/tables/platform_function_graph_execution_outputs/alterations/alt0000002637 [schemas/constructive_compute_public/tables/platform_function_graph_execution_outputs/table schemas/constructive_compute_public/schema] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add set_comment
Expand Down
4 changes: 4 additions & 0 deletions ...e/revert/schemas/constructive_compute_public/schema/default_table_privs/authenticated.sql
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
-- Revert: schemas/constructive_compute_public/schema/default_table_privs/authenticated


ALTER DEFAULT PRIVILEGES IN SCHEMA "constructive_compute_public" REVOKE SELECT, INSERT, UPDATE, DELETE ON TABLES FROM authenticated;
3 changes: 3 additions & 0 deletions pgpm/constructive-compute/sql/constructive-compute--0.0.1.sql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,9 @@ ALTER DEFAULT PRIVILEGES IN SCHEMA constructive_compute_public
ALTER DEFAULT PRIVILEGES IN SCHEMA constructive_compute_public
GRANT ALL ON TABLES TO administrator;

ALTER DEFAULT PRIVILEGES IN SCHEMA constructive_compute_public
GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO authenticated;

CREATE TABLE constructive_compute_public.platform_function_graph_execution_outputs (
created_at timestamptz NOT NULL DEFAULT now()
) PARTITION BY RANGE (created_at);
Expand Down
1 change: 1 addition & 0 deletions ...e/verify/schemas/constructive_compute_public/schema/default_table_privs/authenticated.sql
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
-- Verify: schemas/constructive_compute_public/schema/default_table_privs/authenticated
6 changes: 5 additions & 1 deletion pgpm/constructive-infra-seed/deploy/grants/standalone_schema_access.sql
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
-- Deploy: grants/standalone_schema_access
-- made with <3 @ constructive.io
--
-- Standalone dev-mode grants for the authenticated role.
-- Standalone dev-mode grants for the authenticated and anonymous roles.
--
-- In the monolith, schema USAGE and table SELECT are granted at provisioning
-- time by the RLS module. In standalone mode there is no provisioning step,
Expand All @@ -13,6 +13,10 @@

BEGIN;

-- ═══════════════════════════════════════════════════════════════════════════════
-- AUTHENTICATED role (full CRUD)
-- ═══════════════════════════════════════════════════════════════════════════════

-- ─── Schema USAGE ────────────────────────────────────────────────────────────
GRANT USAGE ON SCHEMA constructive_compute_public TO authenticated;
GRANT USAGE ON SCHEMA constructive_platform_function_graph_public TO authenticated;
Expand Down
7 changes: 7 additions & 0 deletions .../constructive_platform_function_graph_public/schema/default_table_privs/authenticated.sql
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
-- Deploy: schemas/constructive_platform_function_graph_public/schema/default_table_privs/authenticated
-- made with <3 @ constructive.io

-- requires: schemas/constructive_platform_function_graph_public/schema


ALTER DEFAULT PRIVILEGES IN SCHEMA "constructive_platform_function_graph_public" GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO authenticated;
1 change: 1 addition & 0 deletions pgpm/constructive-platform-function-graph/pgpm.plan
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,7 @@ schemas/constructive_platform_function_graph_public/schema/default_function_priv
schemas/constructive_platform_function_graph_public/schema/default_seq_privs/administrator [schemas/constructive_platform_function_graph_public/schema] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add alter_default_privileges_grant_on_sequences
schemas/constructive_platform_function_graph_public/schema/default_seq_privs/authenticated [schemas/constructive_platform_function_graph_public/schema] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add alter_default_privileges_grant_on_sequences
schemas/constructive_platform_function_graph_public/schema/default_table_privs/administrator [schemas/constructive_platform_function_graph_public/schema] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add alter_default_privileges_grant_on_tables
schemas/constructive_platform_function_graph_public/schema/default_table_privs/authenticated [schemas/constructive_platform_function_graph_public/schema] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add alter_default_privileges_grant_on_tables
schemas/constructive_platform_function_graph_public/tables/platform_function_graph_commit/table [schemas/constructive_platform_function_graph_public/schema] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add create_table
schemas/constructive_platform_function_graph_public/tables/platform_function_graph_commit/alterations/alt0000002579 [schemas/constructive_platform_function_graph_public/schema schemas/constructive_platform_function_graph_public/tables/platform_function_graph_commit/table] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add disable_row_level_security
schemas/constructive_platform_function_graph_public/tables/platform_function_graph_commit/alterations/alt0000002580 [schemas/constructive_platform_function_graph_public/tables/platform_function_graph_commit/table schemas/constructive_platform_function_graph_public/schema] 2017-08-11T08:11:51Z Constructive <developers@constructive.io> # add set_comment
Expand Down
4 changes: 4 additions & 0 deletions .../constructive_platform_function_graph_public/schema/default_table_privs/authenticated.sql
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
-- Revert: schemas/constructive_platform_function_graph_public/schema/default_table_privs/authenticated


ALTER DEFAULT PRIVILEGES IN SCHEMA "constructive_platform_function_graph_public" REVOKE SELECT, INSERT, UPDATE, DELETE ON TABLES FROM authenticated;
3 changes: 3 additions & 0 deletions .../constructive-platform-function-graph/sql/constructive-platform-function-graph--0.0.1.sql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,9 @@ ALTER DEFAULT PRIVILEGES IN SCHEMA constructive_platform_function_graph_public
ALTER DEFAULT PRIVILEGES IN SCHEMA constructive_platform_function_graph_public
GRANT ALL ON TABLES TO administrator;

ALTER DEFAULT PRIVILEGES IN SCHEMA constructive_platform_function_graph_public
GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO authenticated;

CREATE TABLE constructive_platform_function_graph_public.platform_function_graph_commit ();

ALTER TABLE constructive_platform_function_graph_public.platform_function_graph_commit
Expand Down
1 change: 1 addition & 0 deletions .../constructive_platform_function_graph_public/schema/default_table_privs/authenticated.sql
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
-- Verify: schemas/constructive_platform_function_graph_public/schema/default_table_privs/authenticated
12 changes: 6 additions & 6 deletions www/src/components/FlowsPanel.tsx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -488,8 +488,8 @@ async function pollExecutionStatus(executionId: string): Promise<{
? (new Date(n.completedAt || Date.now()).getTime() - new Date(n.startedAt).getTime())
: null,
}));
} catch {
// node_states query may fail if schema not yet available
} catch (err) {
console.error('[pollExecutionStatus] node_states query failed:', err);
}

// Also query invocations for detailed payload/result data
Expand All @@ -501,8 +501,8 @@ async function pollExecutionStatus(executionId: string): Promise<{
orderBy: ['CREATED_AT_ASC'],
}).unwrap();
invocationsArr = invResult?.platformFunctionInvocations?.nodes ?? [];
} catch {
// Invocations query may fail if graphExecutionId filter isn't supported yet
} catch (err) {
console.error('[pollExecutionStatus] invocations query failed:', err);
}

const nodeStates: Record<string, NodeState> = {};
Expand Down Expand Up @@ -807,8 +807,8 @@ export function FlowsPanel() {
pollRef.current = null;
setIsExecuting(false);
}
} catch {
// Keep polling on transient errors
} catch (pollErr) {
console.error('[execution-poll] transient error:', pollErr);
}
}, EXECUTION_POLL_MS);
} catch (err: unknown) {
Expand Down
Loading