Pain point · Permissions & security · Causes churn
Studio misreports function execution privileges
1 source thread · first seen 2026-09
Summary
Studio marks functions as revoked even when PostgreSQL's default PUBLIC EXECUTE privilege lets anon invoke them through PostgREST. This makes the displayed access state disagree with actual behavior.
- Affects
- Teams managing exposed database functions
Evidence
Excerpts are copied word for word from the source; follow the link to read it in full.
“Studio's **Exposed functions** state can report a function as `revoked` even though `anon` can still execute it”