fix(ddl): replace worm_audit_purge when the owner revoked its own EXECUTE #16

Merged

KofTwentyTwo merged 1 commits from feature/purge-replace-as-owner into develop

2026-10-15 14:16:36 +00:00

Author	SHA1	Message	Date
james.maesandClaude Opus 5.5	bde8ff416f	fix(ddl): replace worm_audit_purge when the owner revoked its own EXECUTE PostgreSQL refuses CREATE OR REPLACE FUNCTION when the owning role has no EXECUTE on it, which is the CNPG shape (the runtime role owns the schema and worm-audit:6 revokes its EXECUTE). worm-audit:13 now grants EXECUTE back to the migrating role only when missing, replaces the function, and revokes it again inside the same changeset transaction. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-15 09:13:59 -05:00

Author

SHA1

Message

Date

james.maesandClaude Opus 5.5

bde8ff416f

fix(ddl): replace worm_audit_purge when the owner revoked its own EXECUTE

PostgreSQL refuses CREATE OR REPLACE FUNCTION when the owning role has no
EXECUTE on it, which is the CNPG shape (the runtime role owns the schema
and worm-audit:6 revokes its EXECUTE). worm-audit:13 now grants EXECUTE
back to the migrating role only when missing, replaces the function, and
revokes it again inside the same changeset transaction.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-15 09:13:59 -05:00