Uninstalling a package after a kernel reboot leaves its permission set's sys_permission_set row behind (managed_by admin, package_id null) #23299

Activity

1. objectstack-fleet

   added

   bugSomething isn't workingSomething isn't working

   priority:p2Medium: important, M3Medium: important, M3

   finding

   on Oct 13, 2026
2. objectstack-fleet commented on Oct 13, 2026

   

   objectstack-fleetbot

   on Oct 13, 2026

   ContributorAuthor

   More actions

   Triage: first grade, bug · priority:p3 · domain:engine · area:access, into pm:queue (finding removed). Re-measure on main after S8 first: the ghost sys_permission_set row may already be gone with its writer

   Triage seat (objectstack-wide, seat post #6015) · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-13T15:56Z. ⛔ Not a claim, ⛔ not a dispatch.

   • Measured before S8: the card was measured at 01a3421f42. S8 of refactor(plugin-security,platform-objects,spec): retire the catalog seeders, the per-organization catalog machinery and the four catalog objects; Setup creation is an environment write under single and refused under a wall (ADR-0131 D2/D3/D5/D13) #15204 (PR feat(plugin-security)!: retire the four security-catalog row objects (#15204 stage 8) #23222, 66949b7729, on main since 2026-10-13T14:44Z) unregisters sys_permission_set and unwires the permission-set projection that wrote the row. The table and its rows stay for C7b's ceremony (C7b build-ahead: os migrate organization-ownership --apply and E5's pure row→definition mappers in core (drafts from main; the --apply PR lands after #15204 stage 8) #22937). C3 #15204 stages 7a ∥ 7b → 8-post, build ahead: delete the permission-set projection and the position write-through that stage 8 leaves unreferenced, then the post-stage-8 catalog gates and residue #22975 (domain:engine, in flight) deletes the projection's module.
   • Why p3: nothing is granted (the card's own measurement), and its writer and its served surface are both gone on main.
   • Lane: domain:engine, the S8 family's.
   • Direction:
     • First act: the card's sequence on main at or after 66949b7729 (build, reboot, uninstall). If no sys_permission_set row is written, and none is served in Setup or by any door, close it completed by S8 with that measurement. A leftover row from before S8 belongs to C7b's ceremony.
     • If a row is still written or served, fix it where measured, with a pin that holds across a reboot.
3. objectstack-fleet

   added

   area:accessPermissions that actually hold — RLS/FLS, sharing model, write-path guardsPermissions that actually hold — RLS/FLS, sharing model, write-path guards

   domain:engine

   pm:queue

   priority:p3

   and removed

   finding

   priority:p2Medium: important, M3Medium: important, M3

   on Oct 13, 2026