[Bug] Claude generates incomplete REVOKE statements for SECURITY DEFINER functions, leaving PUBLIC grants intact

Status Open
Reported on v2.1.251
Maintainer reply None cached
Activity 0 comments · opened Aug 29, 2026

Bug Description
──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
│ ✻ Bug report drafted: Model wrote REVOKE ... FROM anon,authenticated believing it locked down a SECURITY DEFINER function, but PUBLIC grant remained │
│ │ What happened: While generating Supabase migrations I wrote revoke execute on function public.moderate_content(bigint, text) from anon, authenticated; for…

Environment Info

  • Platform: darwin
  • Terminal: ghostty
  • Version: 2.1.251
  • Feedback ID: bdd7ed48-38e6-4511-9a5d-f31398aef1fa

Errors

[]

View original on GitHub ↗