jochen e0e97a96c4 Report as revoked only what the read-back shows gone, and take back what the reader passed on (review of hq issue 337) ...

A reader given a privilege WITH GRANT OPTION that passed it on made the
plain revoke fail with dependent privileges exist; the pass still listed the
table as revoked and logged it every minute. The pass now retries such a
change with CASCADE, which reaches only grants that came from the reader,
reads the grants back, reports as revoked only what is gone, and says what
is still held and why when anything is.

2026-10-08 22:11:06 +02:00

..

client_test.go

Give the store's reader only the columns a module declares readable, never a secret, so a query cannot read the controller's signing key (hq issue 337)

2026-10-08 21:43:15 +02:00

client.go

Revoke the reader's grants as their own grantors and read them back, alter its role only on drift, and report definer functions and views (review of hq issue 337)

2026-10-08 22:01:57 +02:00

fake_test.go

Port postgres to Go and install the extensions a consumer asks for

2026-10-05 23:29:55 +02:00

harness_same_test.go

Retire a consumer the mesh stops asking for, and delete only on a person's word (hq ADR 0230)

2026-10-06 13:54:10 +02:00

harness_test.go

Retire only once the same answer has held ten minutes as well as five passes

2026-10-06 14:28:21 +02:00

harness.go

Retire only once the same answer has held ten minutes as well as five passes

2026-10-06 14:28:21 +02:00

live_reader_test.go

Give the store's reader only the columns a module declares readable, never a secret, so a query cannot read the controller's signing key (hq issue 337)

2026-10-08 21:43:15 +02:00

live_test.go

Retire a consumer the mesh stops asking for, and delete only on a person's word (hq ADR 0230)

2026-10-06 13:54:10 +02:00

main.go

Give the store's reader only the columns a module declares readable, never a secret, so a query cannot read the controller's signing key (hq issue 337)

2026-10-08 21:43:15 +02:00

provisioner.go

Retire a consumer the mesh stops asking for, and delete only on a person's word (hq ADR 0230)

2026-10-06 13:54:10 +02:00

readable_live_test.go

Report as revoked only what the read-back shows gone, and take back what the reader passed on (review of hq issue 337)

2026-10-08 22:11:06 +02:00

readable_test.go

Report as revoked only what the read-back shows gone, and take back what the reader passed on (review of hq issue 337)

2026-10-08 22:11:06 +02:00

readable.go

Report as revoked only what the read-back shows gone, and take back what the reader passed on (review of hq issue 337)

2026-10-08 22:11:06 +02:00

retire_pg_test.go

Retire a consumer the mesh stops asking for, and delete only on a person's word (hq ADR 0230)

2026-10-06 13:54:10 +02:00

retire_pg.go

Declare every module's data; the backup holder measures it (hq ADR 0233)

2026-10-06 16:47:49 +02:00

retirement_test.go

Retire only once the same answer has held ten minutes as well as five passes

2026-10-06 14:28:21 +02:00

retirement.go

Declare every module's data; the backup holder measures it (hq ADR 0233)

2026-10-06 16:47:49 +02:00

standing_test.go

Retire a consumer the mesh stops asking for, and delete only on a person's word (hq ADR 0230)

2026-10-06 13:54:10 +02:00

tools.go

Revoke the reader's grants as their own grantors and read them back, alter its role only on drift, and report definer functions and views (review of hq issue 337)

2026-10-08 22:01:57 +02:00