Troubleshooting

Connection failures: the network-error phrase catalogue

Every fixed network-error phrase RowShield can show, what each one means, and why raw driver messages are never passed through.

Empty results explained: the three meanings of silence

An empty response has three possible meanings. How RowShield tells denied-by-default, genuinely empty and filtered-by-policy apart.

When RowShield and the Security Advisor disagree

RowShield tests runtime behaviour; the dashboard advisor inspects configuration. Here is how to adjudicate when the two disagree.

Infinite-recursion policy errors and the helper fix

Diagnose SQLSTATE 42P17 infinite-recursion policy errors and apply the security definer helper-function pattern, with a worked example.

Alerts not arriving: threshold, destination, dedupe

Most missing notifications come down to threshold filtering, destination health or deliberate dedupe. Work through the checks in order.

Revoking access: disconnecting a project

What happens when you disconnect a project: probing stops immediately, credentials are discarded and stored history is deleted on schedule.

Fix: 'new row violates row-level security policy for table X'

What the insert and update error means, the four usual causes, how to list the policies actually on the table, and the WITH CHECK fix — plus the two fixes that make it worse.