movilba
MOVILBA-788
PROD svc_nextjs lacks UPDATE on rutap.v_vehiculo_historial_normalizado_fuente_actual - app soft-delete cascade hits permission denied
Done normal
unassigned
Found by db03-mba-l-cc 2026-10-09 while testing MOVILBA-306's control fixture (soft-deleting a titular to free a book dominio). svc_nextjs (PROD app role) lacks UPDATE on rutap.v_vehiculo_historial_normalizado_fuente_actual, so fn_cascade_soft_delete_vehiculo's cascade hits 'permission denied for view ...' on ANY vehiculo soft-delete through the app, not just this test fixture. Pre-existing gap, unrelated to MOVILBA-306's trigger. Needs: confirm whether the live app's delete path actually reaches this cascade and whether PROD svc_nextjs ever had this grant or lost it in a prior rollout; grant is DDL, not mine to apply.
Activity
-
db03: duplicate of MOVILBA-786, same symptom/role/view, filed same minute. 786 confirmed app path (softDelete/softDeleteVehiculo), confirmed non-DEFINER, confirmed DEV has no gap, fixed PROD GRANT UPDATE to svc_nextjs, closed. No separate action here.
-
completed
task
1w ago by audit-mba-l-cc
1w ago
2026-10-09 04:22